6646ffeabf73e8075df4f2d4a2243e23_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6646ffeabf73e8075df4f2d4a2243e23_JaffaCakes118
Size

746KB
MD5

6646ffeabf73e8075df4f2d4a2243e23
SHA1

1dbf0086b01af7d5a4bf48786c21a1ef211ee3be
SHA256

e05d068a9752e6d1bcb54deda4d896ee9ef5a16b6a45f4fcc6c30330f0bd9042
SHA512

58179cf1a15eb48ea437112d7c853dfa8c31414ce22440898c792a58a75140ad1057ebde08b13e7a98c93d5de82caedda35dd472a170ed08dacc5ec1f910c298
SSDEEP

12288:ZKHjlI0qx0VuT3y00jbj3vvmg71jVGVhqtVK:LBC00fDbHnzK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6646ffeabf73e8075df4f2d4a2243e23_JaffaCakes118

Files

6646ffeabf73e8075df4f2d4a2243e23_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4722b51a2f970a92a6464080a23d0869

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
Sleep
GetTickCount
LockResource
GetModuleHandleA
SizeofResource
FindResourceA
CreateMutexA
OpenMutexA
LoadResource
GetProcAddress
GetStartupInfoA

advapi32

GetUserNameA

msvcrt

_except_handler3
malloc
exit
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
strstr

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 339KB - Virtual size: 339KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ