6acfa2ecb36f8de9416b9428a84340a5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6acfa2ecb36f8de9416b9428a84340a5_JaffaCakes118
Size

12KB
MD5

6acfa2ecb36f8de9416b9428a84340a5
SHA1

d723ed70cb68010433dd6f4b9ede7fa0b36a60ac
SHA256

db6cf92165cdd126908d68191af65132f7c719ace64731e03cde36391ae53024
SHA512

cd17dbf5fb0aeefe4408fe18b0ebdf635a53a530516f91014cfebe771ffc1882e09825803c31aa8e1b44f4084d3a0ddafae637c06255f7358541a414d0331f2e
SSDEEP

192:ZeXRdMGP9U34N6zJ5EU3dromfmYKqgb++Gd1/YWweKJrTJ1NKBPY89JjjKKG:gXRdb1UQITZ/fPKqAGdRYWH2dADPKr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6acfa2ecb36f8de9416b9428a84340a5_JaffaCakes118

Files

6acfa2ecb36f8de9416b9428a84340a5_JaffaCakes118
.exe windows:1 windows x86 arch:x86

251575623650bc933bad8739ca1c1602

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
Sleep
CreateThread
ExitProcess
VirtualAlloc
RtlMoveMemory
WaitForSingleObject

user32

MessageBoxA

ntdll

NtSetInformationThread
RtlDecompressBuffer

Sections

.code
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 390B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ