6a754f70d0b37e8c60ec5d8207690839_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a754f70d0b37e8c60ec5d8207690839_JaffaCakes118
Size

63KB
MD5

6a754f70d0b37e8c60ec5d8207690839
SHA1

ddc3164aeeca60917603ff991ed791318f86f848
SHA256

101ed78a80a1589b8aeefc19eed4c492a904eca62672b65ab0bd423b8a309128
SHA512

a05ef15da4201f59019cc1ed888318bbdeda34d9285fb6e421ca337f07a3e94831ca27008d910163940c4fdea81fb23fe600eacd8af3d261843bd22bbf7333ac
SSDEEP

1536:CwMg2kwv74x64Vg9ivf0C8eDHnw9CSZ6fILiZr42m:ChNtv464G43a4HQCS2m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a754f70d0b37e8c60ec5d8207690839_JaffaCakes118

Files

6a754f70d0b37e8c60ec5d8207690839_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4650ba837d23857b601727d2e7d35b7c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileA
CreateDirectoryExW
SetVolumeLabelW
GetCalendarInfoA
DisconnectNamedPipe
GlobalAddAtomW
GetAtomNameA
GetStringTypeA
ReadConsoleInputExA
DeviceIoControl
AreFileApisANSI
GetCPInfoExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE