6ab27fbe26cfbb865be5d8926e4af0fc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ab27fbe26cfbb865be5d8926e4af0fc_JaffaCakes118
Size

63KB
MD5

6ab27fbe26cfbb865be5d8926e4af0fc
SHA1

145aca05bf37a4cb0a24af89466692a38d48d447
SHA256

3cd5d4a807b292e8f2a55b8573a1704e87e0a8e2303b71b04c606ae90d8907a0
SHA512

804add7013d1bec4def745fbf42b41d6ed2fd0eb1b00ed132313fd48627f8d8370418b34a75306cd83bd677698896422a3ee3203eea51f0a8dcf196993c7c08b
SSDEEP

1536:9eBMSZklwpN52pC854/x4AGgSozOvrfJ4oxKft4B28H2L:9eBP7NU4854/x44Ozh4oK4C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ab27fbe26cfbb865be5d8926e4af0fc_JaffaCakes118

Files

6ab27fbe26cfbb865be5d8926e4af0fc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0ca7fd64d605f6579420e72a00224eaa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockResource
RequestWakeupLatency
ReadConsoleOutputCharacterW
GetVolumeNameForVolumeMountPointA
CloseProfileUserMapping
GetVolumePathNamesForVolumeNameA
WriteConsoleOutputAttribute
FindFirstChangeNotificationA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE