6f7f4b2804974f2a7b7c4c7930c62cc5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f7f4b2804974f2a7b7c4c7930c62cc5_JaffaCakes118
Size

686KB
MD5

6f7f4b2804974f2a7b7c4c7930c62cc5
SHA1

771cc9fd208bef9ad6678b7e5e0d7068f56555bc
SHA256

e197512b9d6d08567a65b49531af711ae5659dddb8758d79b48b46279942b89f
SHA512

112fa325846bde4dbe93ea2733e1c69269883ccfe90dccb92ac8d3669a1c3f280d950fc22cf88f3c6e0386e7162d9affd6451fae125bcf089f9beed37bb323fb
SSDEEP

12288:0+iJiq3Ecf/q1v1VTsxfqXXdMWeShNfYOLPtypjVRP:aF3Ew/YViqndMvwP4jVB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f7f4b2804974f2a7b7c4c7930c62cc5_JaffaCakes118

Files

6f7f4b2804974f2a7b7c4c7930c62cc5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

13d7560eb27c7d7a6fd3e356710688bc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

pdb.pdb

Imports

kernel32

OpenProcess
GetCurrentProcessId
lstrcmpA
MulDiv
LocalFree
Sleep
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
TerminateThread
WaitForSingleObject
CreateThread
CloseHandle
GetLocaleInfoA
LeaveCriticalSection
EnterCriticalSection
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
HeapAlloc
GetProcessHeap
HeapFree
EnumCalendarInfoExA
GetCommProperties

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 656KB - Virtual size: 652KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ