6785c6bf296055aca1ea9ac8faee2628_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6785c6bf296055aca1ea9ac8faee2628_JaffaCakes118
Size

63KB
MD5

6785c6bf296055aca1ea9ac8faee2628
SHA1

7c3ffc8f93f4cc52a5224983df78daf38d41a16c
SHA256

2fbf487210d670fd388387fb7bef94cea7292420727cbfd15a10bea0519324d6
SHA512

d120b2cf86315652bf45310dba2fb45178e73b2a08044c3b341b6ecde4ecc9e5447eabda3488e1fd9509040c702a312d3c61b42f18cca929b5a8c4d0afe50f46
SSDEEP

1536:W05ErsjMyiULaLUwCoCBkzuliFEXOKHtXCwOsVOdbxUlKUznmV:L2sAyiOaLUwHSkylsEXNywOdbxU8Uzn2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6785c6bf296055aca1ea9ac8faee2628_JaffaCakes118

Files

6785c6bf296055aca1ea9ac8faee2628_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3509ed82e454122a5d38edfd9bf25187

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringA
AddRefActCtx
BuildCommDCBW
CreateEventW
DeleteVolumeMountPointW
CreateMailslotA
HeapSize
SetThreadPriorityBoost
SetConsoleCursorInfo
FoldStringW
WriteConsoleInputVDMA
CancelWaitableTimer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE