6f2162b256c1a8574539b5e11aac606e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f2162b256c1a8574539b5e11aac606e_JaffaCakes118
Size

46KB
MD5

6f2162b256c1a8574539b5e11aac606e
SHA1

ab334ad033d158ba62c812760f1a2d578167901b
SHA256

a2e6f0ba208784566a5ddfb40f35ed9314c677ac8009849d7d1ab1377d18be50
SHA512

cc305b8a30837ae32f449f4b63396f65f45c9e6dde7e705687f31ba4f5b6ef9369ca437858b23fb59c0bda0f039b01b97ec4048fdb573274d6c2787737306bb3
SSDEEP

768:0xotcn9KBPymskN0PpLdE4TGImeDngIDLBbTx/FrjEoSd3EqW:MBn9KImBNbFIm8ngeBbfrIoS97W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f2162b256c1a8574539b5e11aac606e_JaffaCakes118

Files

6f2162b256c1a8574539b5e11aac606e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c70924c2fe5d289f22f78e2eacde5fb1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
LeaveCriticalSection
SetUnhandledExceptionFilter
CloseHandle
DeleteCriticalSection
GetLastError
GetModuleHandleW

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 262B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ