6875f1094fafd81612be1ab32043efce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6875f1094fafd81612be1ab32043efce_JaffaCakes118
Size

61KB
MD5

6875f1094fafd81612be1ab32043efce
SHA1

b9c3907d86d58b65020d35b4265f2045372f1d07
SHA256

fad2ea387f39dad59dc6853e0340b962d61dcb9c05b8f3db2d907df8b8339aa6
SHA512

a169baf879ed17c5b2adaf5e52090a898f3cbbe04d47bf23268970160cf03e1e8a3bb9787fd42fc6a5c33d4c78df54dbff222efb325f30614f7c2659139e9e8c
SSDEEP

1536:jVQQQQFrITtfH/kfpkGUgE5wQX1B40GyAsrN+uK+YjOQ:jVQQQQFrKtffmpkil50HAsrw+1Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6875f1094fafd81612be1ab32043efce_JaffaCakes118

Files

6875f1094fafd81612be1ab32043efce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

72cb817cd9596b02a8988e3a23813840

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ZombifyActCtx
RegisterConsoleOS2
HeapQueryInformation
SetConsoleCP
InitAtomTable
GlobalMemoryStatus
DeleteFiber
GlobalUnWire
GetPriorityClass
SetFilePointer
VirtualLock
GetCompressedFileSizeA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE