6f7eb29c57905941b4609fc54c73ffce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f7eb29c57905941b4609fc54c73ffce_JaffaCakes118
Size

1.9MB
MD5

6f7eb29c57905941b4609fc54c73ffce
SHA1

27f4940248fdf4877104ab1218e8e1dad4f95948
SHA256

d1193f096da48604241640752e4f4a3fe87f175b34e6857aea85ae96f4e05fb0
SHA512

1d85e8fa96edd48df767ba13a2ee11f2e011dbc2a6a44252ba1168a680d026e914d65e60b29a311a2e8e17ae922527d6a1cbf304e6f59c57306bcf65f5002c85
SSDEEP

49152:HTH7LpXnzjWxm04RVJnC5smPukqZ0FO/1X:Hz7J/E4j0WmV8P1X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f7eb29c57905941b4609fc54c73ffce_JaffaCakes118

Files

6f7eb29c57905941b4609fc54c73ffce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

33230cf2a8b23d270c3cc8f0a849dfa8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetModuleHandleW
GetUserDefaultLCID
GetSystemDefaultLangID
GetUserDefaultLangID
GetModuleHandleA
GetLastError
GetCommandLineA
GetTickCount
GetSystemDefaultLCID
GetCurrentProcess
HeapAlloc
GetProcessHeap
lstrlenW
GetStringTypeW
GetEnvironmentStringsW
FreeEnvironmentStringsW
CloseHandle
MultiByteToWideChar
GetStartupInfoA
SetUnhandledExceptionFilter
VirtualFree
TlsSetValue
GetFileSize
LCMapStringW
TerminateProcess
CompareStringW
SetStdHandle

Sections

.text
Size: 378KB - Virtual size: 377KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 818B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ