6ab4e04246fab761656f00148873a727_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ab4e04246fab761656f00148873a727_JaffaCakes118
Size

18KB
MD5

6ab4e04246fab761656f00148873a727
SHA1

453f16a733f89f63363a8f822a32a3e3512fa5f8
SHA256

c09965b53397bbdf48a397d0fe96e114d1294acad6d207f81b774f36d91a4848
SHA512

277e50348e788a4094406eeae5edeae531801d8bd9f0d4e45c0b3c095d5ef83a5eb6dee52e20510b6d5048a65e566d3ab45599354004e54310761ba974436b81
SSDEEP

384:Enu/F0ewQPDyi0tF9utL6Ok40asWwIItGgRWvvZhZFGtnOZuoWK0tCz4IEo1DDHt:EveXeN79IGipbDA7K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ab4e04246fab761656f00148873a727_JaffaCakes118

Files

6ab4e04246fab761656f00148873a727_JaffaCakes118
.exe windows:4 windows x86 arch:x86

705ea9a8c19bb3b0215da408d070d0b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateEventA
CreateMutexA
EnterCriticalSection
FreeLibrary
GetCommandLineA
GetFileSize
GetModuleFileNameA
GetPrivateProfileStringA
GlobalLock
LoadLibraryA

user32

DestroyWindow
DrawFocusRect
MessageBoxA
MessageBoxW
PostQuitMessage
SendDlgItemMessageW
TranslateMessage

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 562B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ