6a83ba0229636639e5afb9dedfcd2eaa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a83ba0229636639e5afb9dedfcd2eaa_JaffaCakes118
Size

63KB
MD5

6a83ba0229636639e5afb9dedfcd2eaa
SHA1

46f02f6d3e4e235a049b03b60ed2f72314ce9de5
SHA256

3e56eaba6e782d786cf316b105ded6ff1510bdc810f0e199216922fda0fd1917
SHA512

5f3a0adfced4b82d7b57d1a24b69202fa52d914d0d0438067ebaaf1a44469868c381cf7943f68c724bccbfba5d72d0a02be291975a9b499e9698a7ed56eb924c
SSDEEP

768:OBR5h8LIZ1MQ8Bbji5LnQ3sgf746GDOBHGCJBDVbmNSNRnxza+7dxnwFhpuX1FlW:OvSHin6GDKVVbmGR4qxa3uX59msCsI3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a83ba0229636639e5afb9dedfcd2eaa_JaffaCakes118

Files

6a83ba0229636639e5afb9dedfcd2eaa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6bea0752cecc9b636984073814d689a1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TryEnterCriticalSection
GetPrivateProfileIntW
EnumSystemCodePagesW
ExpungeConsoleCommandHistoryA
SetThreadExecutionState
SetVDMCurrentDirectories
FreeResource
_lwrite
MapViewOfFileEx
HeapReAlloc

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE