6fa51e65533307d993abde4e4d4f93ac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6fa51e65533307d993abde4e4d4f93ac_JaffaCakes118
Size

41KB
MD5

6fa51e65533307d993abde4e4d4f93ac
SHA1

c26084d819a15c0f245ae30f6c18e9cc4c677c3d
SHA256

b6f441057e457ca0f1f29a8f02371b399ae4a6668909489f397e16589c9c9d5f
SHA512

0e909ad73fe81b871f6cef8b7e7b573679ac8fa3904db86ae24581553a79d9cafd03147f39479b21e2f5dbbcd735932ee053d2e0745a4c105f1b133cd92349fa
SSDEEP

768:5ECHC3H+I3ChI5wv/fje5hbbT86nVRGDWfNU0vvg5Cg3ol2Jvxv75j:5ji3HTChI5S/aJ9y+o5Cg3ol2hd75j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fa51e65533307d993abde4e4d4f93ac_JaffaCakes118

Files

6fa51e65533307d993abde4e4d4f93ac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

65804a6528d825ea1743f607c4e44696

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strstr
strcpy
strlen
memcmp
??2@YAPAXI@Z
memset

kernel32

CreateFileA
VirtualAlloc
VirtualFree
CloseHandle
ReadFile
WriteFile

Sections

.text
Size: 15KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE