6ae57e808f0c973f7ae91899c2521d00_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ae57e808f0c973f7ae91899c2521d00_JaffaCakes118
Size

56KB
MD5

6ae57e808f0c973f7ae91899c2521d00
SHA1

ae037eac906fe589bedffa326bee9f105e8d1c65
SHA256

a9b6baa31f11a15c1a994fbd4b5882101ced19cb921650d70299095b4378e934
SHA512

bda63da32ee4072b49f9e953986cfc66da6819165d10589b6d8c193baef2dd864ba4e6d3f012b5c8ee068d509029d9d0aa0cd94f946b3014946cd05c73a4aa62
SSDEEP

768:wmvN91TCmOtzs/QKLKqht86G/Wp4gy8/avCqasUuFjN92m+7nFp0tcPsFkOTtXFr:wXCXhWJ/Wpy/vOvwjntcPcRX9at0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ae57e808f0c973f7ae91899c2521d00_JaffaCakes118

Files

6ae57e808f0c973f7ae91899c2521d00_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d69040007eee060abf4eebaa0a9e3f26

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateTimerQueue
SetConsoleWindowInfo
GetCurrencyFormatW
WritePrivateProfileSectionA
HeapCompact
QueryMemoryResourceNotification
GetConsoleCursorMode
GetConsoleMode
CancelIo
ZombifyActCtx
CreateDirectoryExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE