6a17a117a07595d06f602db361394b9c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a17a117a07595d06f602db361394b9c_JaffaCakes118
Size

392KB
MD5

6a17a117a07595d06f602db361394b9c
SHA1

0e64e79577ba8412abc75f3ec43b15fe54063e8a
SHA256

2ad61a6c5e002a072a5ab3a5d554614aa1702424c9ce0313e8fb911ff95e3ae2
SHA512

1c413a58438efffbfd004d799f5fe7bf8d24c7d7e9e4caf1b363a336c47dfdfb87a82cc9a4d40e9f7ad25d249ba0733e959fc1fcc3257550df2f971353036568
SSDEEP

6144:UzXryusvYPO8WMDjpyoWgDxBV0Lwt40h9NeH97DXpuFGxQULzJp:UzXsj8RyoWqBV0yJhSH9pusX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a17a117a07595d06f602db361394b9c_JaffaCakes118

Files

6a17a117a07595d06f602db361394b9c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ef33d20ab851f174cdd759e358c92fc3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateProcessA
ExitProcess
GetTempPathA
_lwrite
lstrcatA

Sections

.text
Size: 512B - Virtual size: 234B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 375B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 338KB - Virtual size: 340KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 51KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE