6a07d7659c6f3fb53f1684eaf53839f8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a07d7659c6f3fb53f1684eaf53839f8_JaffaCakes118
Size

498KB
MD5

6a07d7659c6f3fb53f1684eaf53839f8
SHA1

4987b5cd600de32b303a7fc0e8aeb9c2183ba124
SHA256

0b8379ebfc9435161447df2cef87848861d403c659fcc29c812601d520d07075
SHA512

c41fb1b5e884f48daec3cbe677d1861b88a6bf98131f7a8483a8879e5bd46533eacf889e7ba3c83e01d5e8120eee6804f612112aba75039eb5b892b64741d800
SSDEEP

12288:q6jXBDHjCCmogYsjd4Vb4RWZBr9ShBtNrHN6WA2jww6g5/Ma4znHZxR:q6jXBDCesGV6IrwPNr4K8wN5mR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a07d7659c6f3fb53f1684eaf53839f8_JaffaCakes118

Files

6a07d7659c6f3fb53f1684eaf53839f8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

827bbf30b51c4417484e6afeb09a1136

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

??1type_info@@UAE@XZ
??3@YAXPAX@Z
__CxxFrameHandler

kernel32

FindResourceA
GetProcessHeap
HeapAlloc
_lclose
_hwrite
_lcreat
GetTempPathA
SizeofResource
LockResource
LoadResource
GetCommandLineA
ExitProcess
GetModuleHandleA
GetStartupInfoA

shell32

ShellExecuteA

Sections

.rdata
Size: 1024B - Virtual size: 746B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 495KB - Virtual size: 494KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ