6893f195cb7eddab2404146acf4de6a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6893f195cb7eddab2404146acf4de6a0_JaffaCakes118
Size

28KB
MD5

6893f195cb7eddab2404146acf4de6a0
SHA1

d3c1295729bec2c1618db8ac5b780fa927d4c19a
SHA256

5c4f347f546479f595639abb480310e6788325e8cc36abe659966beea6290b8a
SHA512

66e6b19e41850d2d6015c4c154351bda8cb494ecd2cd9c2169890fa6f18b8f1480613b27039e4f19e67f706509349a85c9e65afc23cb794c7fb91256a85c5e75
SSDEEP

768:s4LmVA7tquFu0YWustGp1NU8/JriSGWQ3kIX9:sVVqlA7ZkGnxBk6IN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6893f195cb7eddab2404146acf4de6a0_JaffaCakes118

Files

6893f195cb7eddab2404146acf4de6a0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

13a19e38013763e0743b2c77220f473e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_initterm
_except_handler3
_controlfp
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
memset
fopen
fseek
fread
memcpy
__set_app_type
fclose

kernel32

VirtualFree
CreateFileMappingA
GetLastError
MapViewOfFile
UnmapViewOfFile
CloseHandle
VirtualAlloc
VirtualProtect
GetModuleFileNameA
Sleep
ExitProcess

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 778B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ