6f46d9073baff5b0193d896d73fab19c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f46d9073baff5b0193d896d73fab19c_JaffaCakes118
Size

34KB
MD5

6f46d9073baff5b0193d896d73fab19c
SHA1

834830f369f459b5d981cf0e4b2d81aa5bed892c
SHA256

8dbbb4476e987974f4a85d3767cfdf1aaa983d72e664316f4e1c1b0a0d35e648
SHA512

01e904a7eefb67ba96313d94fba154b8670f437459bfcc48e2e5cc47048e4c2ffffecc95a069100a9a55be991842d33185d8c64405108f8824c53bcefde1005b
SSDEEP

768:HDIoCdcchKqe2GDwFOJTLeqVaja1bsM9yi3YrCwXrKfMuy0quJ:koCdVKqpGDwFOJneqVEqp3x0z0qu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f46d9073baff5b0193d896d73fab19c_JaffaCakes118

Files

6f46d9073baff5b0193d896d73fab19c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bbc554d4125556120e3279f395f02e92

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FlushFileBuffers
GetFileTime
GetTempFileNameA
GlobalAlloc
GlobalFree
DeleteFileA
SetFileTime
Sleep
VirtualProtect
WriteFile
lstrcpyA
lstrlenA
CreateFileA
MoveFileA
CloseHandle

advapi32

RegOpenKeyA
RegQueryValueA

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 506B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ