6f0c186497c562cf792e4b1bfd03eca7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f0c186497c562cf792e4b1bfd03eca7_JaffaCakes118
Size

117KB
MD5

6f0c186497c562cf792e4b1bfd03eca7
SHA1

c895b9c98ae5bee6f4f4dfb9a5990e72e1eb881f
SHA256

20b4f69562ff79782587fb458e4c5b7ae846154f4540b01ffad53bb328b3e067
SHA512

8016ee7b9568df3ff26ff5a16febe1de9939db8754b232b71044a0971b6cf67da81e177386c13db0cc329436fe8716f859c2ef795aeb75e0b3d74e00ebf0caa8
SSDEEP

3072:lv5x+VeJejPWf72Q2oRCH37skxrqslxdwjDpl:lxx+V6+6237lxSz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f0c186497c562cf792e4b1bfd03eca7_JaffaCakes118

Files

6f0c186497c562cf792e4b1bfd03eca7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9e9d8c32f31cbd8206dd29de65973985

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
GetDriveTypeA
Sleep
ExitProcess

user32

GetMessagePos
CharNextA

Sections

.text
Size: 512B - Virtual size: 292B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Lrykllcr
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Qafklony
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Yjrkv. Y
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 253B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ