6f4576ae46490de9b65537abf9d0fb6d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f4576ae46490de9b65537abf9d0fb6d_JaffaCakes118
Size

94KB
MD5

6f4576ae46490de9b65537abf9d0fb6d
SHA1

7b736e903c604dae709ae1dccda570604daeaeff
SHA256

1c73cf7ec1dd5dc25e36e87a733808ea0c852c7f517cff947fd2d22a911d03fd
SHA512

934d6b56c9fec85ae9b88bc5e53ab7a3705fbb3a0d5d39287346a2d994c6cee864259e962dcbc044d4bb65daeb3d324a8becf36bebcdc8802cb398921956ea4f
SSDEEP

1536:hcGA5/Pp0nJuwgubvm6pc8hP9hsNN7c8YaEJwZK4/83ZoMOAdL5wTc:hcGANpQJuwrHhP9hONhZEXtpxdL5Cc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f4576ae46490de9b65537abf9d0fb6d_JaffaCakes118

Files

6f4576ae46490de9b65537abf9d0fb6d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

93eb5f64852a323a33e345c0b8b192ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenConsoleW
GetProcessId
OpenJobObjectA
GlobalUnfix
_hwrite
GetPrivateProfileIntW
SetConsoleMode
CommConfigDialogW
GetFileAttributesExW
GetPrivateProfileIntW
SetCalendarInfoW
OpenFileMappingA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE