6a1414417cce9ece7121a82044cd4287_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a1414417cce9ece7121a82044cd4287_JaffaCakes118
Size

129KB
MD5

6a1414417cce9ece7121a82044cd4287
SHA1

ac740f942bd3ccfd3f52ef5aef9a3c91e47ddc95
SHA256

ba7d7dbc5d28a982c511c165196f17f175f18123e92a2d81f623a76d2cd58e64
SHA512

db33c60a69f5040474db1b167fa9c04946fbe6aabb34f57629abb057c2c7384c1a7f1397afd38e2233a5dee4d63efbbd00e64bbb6c672863f29de3ec36a6d551
SSDEEP

3072:weXurGnJGDP2BZNTmaynnv+PJMkR3C7bmV+b6FSsuN:weXE7+dhPsqV+b6FSsuN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a1414417cce9ece7121a82044cd4287_JaffaCakes118

Files

6a1414417cce9ece7121a82044cd4287_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2e8b818a42652630c608097a644db631

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
LoadLibraryA
EnterCriticalSection
ReadConsoleInputA
GetFileInformationByHandle
VirtualProtect
CreateThread
SetNamedPipeHandleState
QueryPerformanceCounter
GetStartupInfoA

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ