6a097e9e9532c58d2d214a15b8a2a95c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a097e9e9532c58d2d214a15b8a2a95c_JaffaCakes118
Size

39KB
MD5

6a097e9e9532c58d2d214a15b8a2a95c
SHA1

40cb5f8165cd0c8bd4f364457ff85a77c5422c9b
SHA256

4811811fcdd7847a7d3371b16bc7e65cbff598327cb2ee1a40250045d57002ac
SHA512

555840fd3ead745423edc6fdc6ad825358153fa8e866690736cb715bdaa9ab17486753f4b772ff7b5e182e0bed518ffdd3c2e89be634d8c94701323ea906b45d
SSDEEP

768:GIFXuW60bVg+39f4Ncveu0W+0oacWJSbQIchmzXN7c1S8N3GO/0H6TbzkXwNjoF5:3XuW6AVg6Frveu9ZSkNgXNse6T3kXwI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a097e9e9532c58d2d214a15b8a2a95c_JaffaCakes118

Files

6a097e9e9532c58d2d214a15b8a2a95c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cef57af3472d7990f412fad8145f725c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crtdll

memset
strlen
_strnicmp
strncmp
strncpy
strcpy
strcat

kernel32

GetModuleHandleA
GetCommandLineA
ExitProcess
HeapCreate
HeapAlloc
GetModuleFileNameA
Sleep
HeapDestroy
HeapFree
SetCurrentDirectoryA
WaitForSingleObject
DeleteFileA
HeapReAlloc
CreateFileA
CloseHandle
ReadFile
SetFilePointer
GetFileSize
WriteFile

user32

wsprintfA
wvsprintfA

shell32

ShellExecuteExA

urlmon

URLDownloadToFileA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE