6f060d8b4bfff15357a85f7977617ee1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f060d8b4bfff15357a85f7977617ee1_JaffaCakes118
Size

67KB
MD5

6f060d8b4bfff15357a85f7977617ee1
SHA1

367c193cad95cfb9fd83be255672b6b02899a894
SHA256

61565ae8eb8daccf92acbf0844d46b049ea4f4a54d71133dc7bd3b41c099ea38
SHA512

53e19f0b690d1cea902a1cfceb9194567f0f44b168d1c70bab5e497b7a47f13d5cdef2217c40f3085a83a26efbf01669e8c46572cbd35e7b333de01ccd73de70
SSDEEP

1536:4a5IKCv/lo4I1C5vEeZBD6appPPu9VIIVTsesjSA2/MNOf/K:5VC1ovOvOajPuHII55sjSN0NOf/K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f060d8b4bfff15357a85f7977617ee1_JaffaCakes118

Files

6f060d8b4bfff15357a85f7977617ee1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b278b068e9c6a8ef9e000460c0f210a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GenerateConsoleCtrlEvent
GetLocaleInfoW
FreeResource
GlobalFlags
IsBadReadPtr
FreeUserPhysicalPages
GetSystemDefaultLCID
MoveFileA
HeapQueryInformation
Process32FirstW
SetCommState
EnumSystemLocalesW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE