6f271ec9913348eb3d559a08c30d2354_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f271ec9913348eb3d559a08c30d2354_JaffaCakes118
Size

29KB
MD5

6f271ec9913348eb3d559a08c30d2354
SHA1

7acbd84ecd91512e8d2d69683846a54ce0c25c1c
SHA256

4193696d3b307236fb3f1415966535d5336877c2ffb969f049579b62a9f210eb
SHA512

2cbd8dc2b55a5328c3c612a4dec8a266481e28b62831ba0e51fa0a064a1d2cef79b533f3a54df4fa6790192f8b7b5202bb25bc7d5b54eee905e717f3b3afa4fd
SSDEEP

768:JjZc2j6xgSeXXgIg7LWZgr/2q+inrNv8Wf6dNdTnE:JjZc2jZSIXhgfWQB7aV/dTnE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f271ec9913348eb3d559a08c30d2354_JaffaCakes118

Files

6f271ec9913348eb3d559a08c30d2354_JaffaCakes118
.exe windows:4 windows x86 arch:x86

57076d0cbc5159dde86270ab7a1976ae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
VirtualProtect
GetTickCount
RequestDeviceWakeup
SizeofResource
LockResource
FreeResource
GetCommandLineA
lstrcpyA
lstrlenA
GetShortPathNameA
lstrcatA
GetEnvironmentVariableA
CreateProcessA
ExitProcess
HeapFree
GetProcessHeap

Sections

.text
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ