6a3d0608194b995ed187416372c9c475_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a3d0608194b995ed187416372c9c475_JaffaCakes118
Size

67KB
MD5

6a3d0608194b995ed187416372c9c475
SHA1

5736b132cf345fc7e07e465f7928f7c4cb615f6d
SHA256

ddc7049ab8816de5ba93c09a725c2d114d21db436a4c53dce1ba8f4f8573188b
SHA512

4b3015795abb10d6979ff3bf1fa506ddca91d3b82b80b24865645efb1116d132d933981ec3c3a3b1c8de0dd4a1098a69107d1a98d33582f354a28ca4137313a7
SSDEEP

1536:z+O+3E8DrvnL93zZ0K5QsYdC+ZvzR2hvBvy7y9tO2:z+5DZ0nM+Zr03

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a3d0608194b995ed187416372c9c475_JaffaCakes118

Files

6a3d0608194b995ed187416372c9c475_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c8decf3582072f6edfc385a689f44f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile

Sections

.text
Size: 51KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE