6a4add9a4f25b3693f2395ccc866e6dd_JaffaCakes118 | Triage

Sharing

General

Target

6a4add9a4f25b3693f2395ccc866e6dd_JaffaCakes118
Size

115KB
MD5

6a4add9a4f25b3693f2395ccc866e6dd
SHA1

8d0f6f8e3d4850ffc2156ad18a347282ca1c0915
SHA256

4be976fc6a7aa0b707546a1e859fdb3da7de82f23ed805d980d22ae9bbc42697
SHA512

8fe35d56f6cc2abb1e741e077490ca8ee605b9d50037f5a7c702c38ef9a72f4db98aeac613a6a5725320cb9b21f95770e4760d0a921ff45455e30257b42e8a7e
SSDEEP

3072:a49WjvJgLYkrO5JBsFaOLfLc2P67LSBnDx7FX8LwJM:aekvJCYuO9SaOLTcZLc975tM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a4add9a4f25b3693f2395ccc866e6dd_JaffaCakes118

Files

6a4add9a4f25b3693f2395ccc866e6dd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dad504744feebf0a6ac3fc913c19dbed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
WriteFile
CloseHandle
CreateFileA
CreateThread
ExitProcess
ExitThread
GetFileSize
GetModuleFileNameA
GetProcAddress
LoadLibraryA
ReadFile
SetFilePointer
Sleep
VirtualAlloc
WaitForMultipleObjects
WaitForSingleObject

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ