6f07f0a107d177ccd5a5c9829a5f5ecc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f07f0a107d177ccd5a5c9829a5f5ecc_JaffaCakes118
Size

27KB
MD5

6f07f0a107d177ccd5a5c9829a5f5ecc
SHA1

46fef9eb050d1b27a85d1c6e3a8c5672fd99889a
SHA256

674e8e5637311e21c0c5fb65fc7902acc95ab470542e5d478c93e61ab957e795
SHA512

dae46f7af467948851ad5a721ccb101a9a1c70b9c255075799cc2af86f5658c7cdd56352191c301516d66d165cd13eaccbf7eeb4034fe3cca0c7183d9472fe40
SSDEEP

192:yJlZuFxVhpTNYs6GXjMfC1oyndRjS1kPj3K9xyU8zLoUJhwd1JeZ6/voCg1rWG1Y:CZGPgyXR18KPj3KzD+61I0kVD//e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f07f0a107d177ccd5a5c9829a5f5ecc_JaffaCakes118

Files

6f07f0a107d177ccd5a5c9829a5f5ecc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

65bff1578df5a6ee7187d692930bf1e4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetStartupInfoA
HeapAlloc
TlsGetValue
GetModuleHandleA
SetEnvironmentVariableA

user32

CreateAcceleratorTableW

gdi32

CombineTransform
GetMapMode
DeleteObject

msvcrt

_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_acmdln

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE