6a0a4d231039b534a982b48517134b4b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a0a4d231039b534a982b48517134b4b_JaffaCakes118
Size

76KB
MD5

6a0a4d231039b534a982b48517134b4b
SHA1

303956b50293e795efa0d14d306727bc4651f89b
SHA256

3f9eba85dcd5de2a36d17713f420ce3afff1cb98f41f2b32c5780049acb1c134
SHA512

dca5b6ffb68ee89bf98e4b2baa94ff0302e738f0eaaa8af3d17a4a43173f13f46d4027bb02f71b7eb75880d54b3cb0be65e5d6576994155da169312123b3eabe
SSDEEP

1536:ZArrrrqM+0NF1Yqn6ExcnXfPoo/IEhYfHkzU7WmDqMR82hW8fPL9:5An5nWXfp5YvkzU7WmWO8vYL9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a0a4d231039b534a982b48517134b4b_JaffaCakes118

Files

6a0a4d231039b534a982b48517134b4b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

89dbb73c97c301f91dfc1f1e55348278

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryA
GetExpandedNameA
BeginUpdateResourceW
OpenProcess
GetEnvironmentVariableW
CreateDirectoryW
DosDateTimeToFileTime
GetStartupInfoA
Process32NextW
DeleteTimerQueueTimer
UnregisterConsoleIME

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE