6a366f418d21d673624314636a8afb71_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a366f418d21d673624314636a8afb71_JaffaCakes118
Size

193KB
MD5

6a366f418d21d673624314636a8afb71
SHA1

27d9e0573d2a5ff92ee89ba97091208401a8a23c
SHA256

c168d5a569054ee72dcced290b7ca1fd0a014582f8d51a4c2d7c69ad46a892cc
SHA512

aa593cb728e7d8a7a6aaa298f634b46b70a2ab89de85fc75b5abc8470103cda2fc71359bdb7dc6e18c3b87e19cfefab78fa05f653fee103a9b39519aa1c11ae5
SSDEEP

6144:GCVwwdEMA9sfnZP0eLG7dbIaJpeaN+5m:uAEFUnBSxYaN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a366f418d21d673624314636a8afb71_JaffaCakes118

Files

6a366f418d21d673624314636a8afb71_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fb9891d0a6cabaf7792e0d7ff5dacd02

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeW
MapViewOfFile
QueryMemoryResourceNotification
ExitThread
UnmapViewOfFile
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetVersionExA
GetEnvironmentVariableW
GetVersionExW
HeapFree
GetConsoleMode
CreateFileMappingA
InterlockedIncrement
WriteConsoleW
EnumResourceTypesW
GetFullPathNameW
CreateFileA
GetPrivateProfileSectionNamesA
GetConsoleCP
GetStringTypeA
GetFileType
QueryPerformanceCounter
GetLocaleInfoA
HeapAlloc
WriteConsoleW
GetStartupInfoA
GetCommandLineA
UnhandledExceptionFilter
FlushFileBuffers
GetStdHandle

gdiplus

GdipCloneImage

ole32

OleTranslateAccelerator
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc

winmm

timeGetTime
timeSetEvent

Sections

.text
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ