6a447674fee4902e5700f6b2199cd67f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a447674fee4902e5700f6b2199cd67f_JaffaCakes118
Size

348KB
MD5

6a447674fee4902e5700f6b2199cd67f
SHA1

e8372bc58426f5ca8aa3c4b8cb4140d4fe1dfb07
SHA256

6bb73e3d90b4ac7c3e64f992b1ed0fa5793c67cfc25c74d14791760d11631dd8
SHA512

af7930d1bdb64442b55f90fd69c136e2f977fa6b8dcd37abdf91d76bb77931edd99d1c752d6592f82f0c0f4a387e03ee292b07d08019105ec75d58ba3650677c
SSDEEP

6144:288lielIVBo9ToEd2S/rcRZI2DNF6u3RQbaogRv5W6Jt3BBSvug:oli1VoToEdDrcRaqh3yboWcvSvug

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a447674fee4902e5700f6b2199cd67f_JaffaCakes118

Files

6a447674fee4902e5700f6b2199cd67f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d01c743967de9cec1bd7bd7aaa1f6864

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__fmode
__set_app_type
_except_handler3
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit

kernel32

GetModuleHandleA
VirtualAlloc
LoadLibraryA
EnterCriticalSection
InterlockedCompareExchange
GlobalAlloc
GetProcAddress
GetStartupInfoA

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ