6a8039bd18f3cfc9651db60e810b9c82_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a8039bd18f3cfc9651db60e810b9c82_JaffaCakes118
Size

83KB
MD5

6a8039bd18f3cfc9651db60e810b9c82
SHA1

3c1f52bebe07666c0b40a10f9b44c6313582ae07
SHA256

5a99fe887263a1543459ffe53732abb837f7d84a2bdeeed9460fbdff09dc3f3f
SHA512

7602f4714cfe001e9da3589817494e1d4abd50b3dc8a335f596cf10e454a490b019d80825be6a8055bb8c015af856b5f3a4104a04f6408039a3a31bd05e33883
SSDEEP

1536:SqS8/QIQ1yfV8vSWFyRNMR8DYq7L/TXWTjEErxTWDTMqhGKYIZTET8bDQ:SqXI9kWTtq7L/CTjBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a8039bd18f3cfc9651db60e810b9c82_JaffaCakes118

Files

6a8039bd18f3cfc9651db60e810b9c82_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f300aefa12255d5daca09eca4d7fcce5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleOS2OemFormat
MulDiv
CreateProcessW
GetFirmwareEnvironmentVariableW
SetFileApisToOEM
IsValidLocale
GetSystemDirectoryA
FreeConsole
GetDriveTypeA
GetMailslotInfo
SetFileApisToOEM

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE