6a97d080fed21b2ea0536e2a65444d0b_JaffaCakes118 | Triage

Sharing

General

Target

6a97d080fed21b2ea0536e2a65444d0b_JaffaCakes118
Size

10KB
MD5

6a97d080fed21b2ea0536e2a65444d0b
SHA1

6e5b5fb665571fd3132b2f558b7d953d9ab765e4
SHA256

65fbaceb47d862d556bded210a17e829f936d3f55fa9cab0d19112a6b1a8f6c4
SHA512

59be7d1471e0d57834bd3400c3b4cd937f625d304e5dc9f8d8d878b1aabe65f3bdbe99469caac5a200b3eb2ed25ed2b08eb27d91ade640fbb834b27449bcabdf
SSDEEP

192:O37R5pkiflfV501fglP1oyvFCfpKgOFcfQ9ZuuOFK4fjNjzMz0:aJ/fX5x1tFCf4gOFckOFKN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a97d080fed21b2ea0536e2a65444d0b_JaffaCakes118

Files

6a97d080fed21b2ea0536e2a65444d0b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cb8248e4fa67624c972cf569430532da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
__p__commode
__p__fmode
__setusermatherr
_controlfp
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
memset
_except_handler3
strcmp
strlen
malloc
__set_app_type
strcpy

kernel32

GetModuleHandleA
GetProcAddress
LoadLibraryA
FindResourceA
LoadResource
LockResource
OpenMutexA
CreateMutexA
SizeofResource
GetModuleFileNameA
GetStartupInfoA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ