6805cf39b63644b79059ad241f6024dd_JaffaCakes118 | Triage

Sharing

General

Target

6805cf39b63644b79059ad241f6024dd_JaffaCakes118
Size

67KB
MD5

6805cf39b63644b79059ad241f6024dd
SHA1

cb438585d4cd739f929a6939c20851f083154223
SHA256

d5100ba24f46a8371bb3f5a362be2bf8f09a12f1c0edadf4d77a8ba786d94b98
SHA512

cb5dc52940ce674e131648ebcc3119b5b65fc3f3d7515c4507354d73c27683a707ffb18615331ad93e5b341c2391516c4116fd06f98594fca72ca0633c78da18
SSDEEP

1536:8nxQlQ1MvfIs4cPcBl2s1Q9qzqUlV7imJE:YxQlQ1Mvr3W1uqzp/umO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6805cf39b63644b79059ad241f6024dd_JaffaCakes118

Files

6805cf39b63644b79059ad241f6024dd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81c2cf7e214d567b43c7f9ac8fc45d97

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
IsDebuggerPresent

Sections

.text
Size: 64KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ