6f5def654f4a8fdb0efb91a8c55192c3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f5def654f4a8fdb0efb91a8c55192c3_JaffaCakes118
Size

32KB
MD5

6f5def654f4a8fdb0efb91a8c55192c3
SHA1

910fa9a79c4da00130e127c0046716d0f3773f1d
SHA256

86514cb0008368c22eda03ac17afbb417877f4b10eb171f011d1e6d01d2a0f74
SHA512

8ba4569909f4f9387049394c09a95a6c0fa3c48135e649088145c15ba0f6deb75244c13501f055c7ed228b9c37964363dda19987479913ae0196cb82743adec1
SSDEEP

192:74anRmqDL/lixyHgghMoeJr2jgIqxQD6LVJTKf3jP:tRZDL9oyHggh+2jfGL7TM3j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f5def654f4a8fdb0efb91a8c55192c3_JaffaCakes118

Files

6f5def654f4a8fdb0efb91a8c55192c3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c99d6a0d973128605e00ee3256e83eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetModuleHandleA
ExitProcess
GetProcessHeap
HeapFree
HeapAlloc
GetStartupInfoA

user32

GetMessageA
IsWindow
CreateWindowExA
DispatchMessageA
RegisterClassA
LoadIconA
PostMessageA
SetCursor
DefWindowProcA
EndPaint
FillRect
BeginPaint
PeekMessageA
GetCursorPos
PostQuitMessage
CharNextA
TranslateMessage
GetClientRect

gdi32

GetStockObject

ole32

CoCreateInstance
CoInitialize
CoUninitialize

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 906B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE