6f09de3c3ede930ae7a430ae12d27f23_JaffaCakes118 | Triage

Sharing

General

Target

6f09de3c3ede930ae7a430ae12d27f23_JaffaCakes118
Size

293KB
MD5

6f09de3c3ede930ae7a430ae12d27f23
SHA1

ac793496a5ae09d8a970bd09fba92c5ae410d7ad
SHA256

13b0081647704f8dd20f71f803cd7844acdbdd2328dcbde73d88e261f276fdc4
SHA512

88356f494a023e3a8b87e99f9bef4ba2cfd1762b4566b45717009629eda7ab60564ab0d386beeef0fac0fe709d253c6ae67d643d323cdc5ae177a5183889a297
SSDEEP

6144:BK1naOa2yoeXYQfTgCgTHTL40zInfusYM+MyDlXHD0hdB7ptp5E5:0ZOEQgCsn6nwrlXHDS3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f09de3c3ede930ae7a430ae12d27f23_JaffaCakes118

Files

6f09de3c3ede930ae7a430ae12d27f23_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3fb863511ecb4e025ef3c40c2a305caa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvbvm60

ord517

Sections

.text
Size: 287KB - Virtual size: 532KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ojob5TS0
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ