6f29f1b7a597a96216f7c7b39a8301d1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f29f1b7a597a96216f7c7b39a8301d1_JaffaCakes118
Size

147KB
MD5

6f29f1b7a597a96216f7c7b39a8301d1
SHA1

ee2698e2aa34603bc77dc64ffada95a88129d929
SHA256

d00b528b71c32fb9d46ab5b01ff6ceec7d73bb8032296ee79a4fc813332e8140
SHA512

a9900143eedb1c0369b1fe3a30b53c39d2d913373867668efe4ca52cdf5cb607dfb496d8b1e9408bc2628b1b5cc8a06f8f026816688d27576ac5de11115da63f
SSDEEP

3072:Y2WVikFqE7xEBTdgB8+6y2ZLMo4vrdk80+R9hQYgF/kxgFXKdmAXEs:DWVikDxEbgBQZwosi8nFilkxgUBXv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f29f1b7a597a96216f7c7b39a8301d1_JaffaCakes118

Files

6f29f1b7a597a96216f7c7b39a8301d1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

768a3ca7ff1764550ee88f5f5fac9616

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
AddAtomA
MoveFileWithProgressW
LZCreateFileW
RemoveVectoredExceptionHandler
FlushFileBuffers
RequestWakeupLatency
GetCurrencyFormatA
CreateFiberEx
GetNamedPipeHandleStateA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 133KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE