6710bd655873dd06993dcd7d0b9cecd1_JaffaCakes118 | Triage

Sharing

General

Target

6710bd655873dd06993dcd7d0b9cecd1_JaffaCakes118
Size

110KB
MD5

6710bd655873dd06993dcd7d0b9cecd1
SHA1

15ffbcaab044fe61add05b7f649ad79a0ed38d62
SHA256

aff66149ff42d41bffe74b46a97a35923a43b8c3c7a6b6109ce052803853336f
SHA512

53ac36799166d048448b78fba886393412bc58ed5ff4c5bfd857993d217f9be3765c6f9505691f87121d74674d5f33c176b578af5901a0ffb171db063c0cb819
SSDEEP

3072:U1+v+sk2Hhwbrfbrd2WtK1gjOLvbrfbr/xNTMXbrTbrfV/aV03qxGl:K+9k9nh9qgUnjxGLjhiva

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6710bd655873dd06993dcd7d0b9cecd1_JaffaCakes118

Files

6710bd655873dd06993dcd7d0b9cecd1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a9a2bf8ea3bcb88c84ed6a127fc025eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__fmode
__set_app_type
_except_handler3
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit

kernel32

LocalFree
GetPrivateProfileSectionNamesA
GenerateConsoleCtrlEvent
CreateMutexA
SetCommBreak
SetFileAttributesA
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ