6f795057d8021d9cdc0d946247875177_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f795057d8021d9cdc0d946247875177_JaffaCakes118
Size

97KB
MD5

6f795057d8021d9cdc0d946247875177
SHA1

25a27aa28602da09b3f908fc3d7ac2d6866e57ac
SHA256

f6623144d75e7d9ed20e93334f8d0cb946195da755b35b8937681e2f41945ae8
SHA512

a630174e00f56971d54489f57df1108468b7c2a93021e9f657ed0f6ab9215161f1ec65b457513f849b0e2a3e4a0c45a5f52ccfeaa279317a55e9cf18d1be8fbc
SSDEEP

192:vQ2ZWIpfBMrmGlD2mTydMA655hvNX0uDUVj6wkQ8:Y2xRB2Pd5Tyd/0HvNEx6BQ8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f795057d8021d9cdc0d946247875177_JaffaCakes118

Files

6f795057d8021d9cdc0d946247875177_JaffaCakes118
.exe windows:4 windows x86 arch:x86

935e93087b031229795c061800a68bb0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
ExitProcess
OpenFile
GetFileType
CloseHandle
ReadConsoleW
GetProcAddress
GetModuleHandleW

gdi32

GetRgnBox
GetClipBox
GetPixel
GetMapMode
GetMiterLimit
SetPixel
CreateCompatibleDC
FillRgn
GetRelAbs
SetBkColor
GetTextFaceW
GetDeviceCaps

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ldr
Size: 152KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ