6610b99e0cf41c7c6dac2144420a3cd1_JaffaCakes118 | Triage

Sharing

General

Target

6610b99e0cf41c7c6dac2144420a3cd1_JaffaCakes118
Size

58KB
MD5

6610b99e0cf41c7c6dac2144420a3cd1
SHA1

208c2da9d819987a101c94ee71e60bc487fefe61
SHA256

0580974880a54e4a63011c10aec0f18a665d7e188c91fdc55b656faad027b2aa
SHA512

883eb0d8eb82a051e9c108ef715b894f0ecce140e092014f107c5b9e8953f3a426e92e5d98aee80297630aa1df03f8af058a9e32ecb71cdfb6d29b5b0a636d2a
SSDEEP

1536:6iEBVuZEcN/YJyzpdXwhHCHcS62Roz4IjAMWHYz3QmlWwQGwd:6iUkf/YJyutSfRop/W4zABwQG2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6610b99e0cf41c7c6dac2144420a3cd1_JaffaCakes118

Files

6610b99e0cf41c7c6dac2144420a3cd1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ef48b67f74d803fe83585fa974853d74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
ExitProcess
VirtualAlloc

ntdll

NtCurrentTeb

opengl32

glScaled

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ