6f814badfc8436fa8126af320618621f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f814badfc8436fa8126af320618621f_JaffaCakes118
Size

31KB
MD5

6f814badfc8436fa8126af320618621f
SHA1

e76316cf7f4164025cecd8b1f10c2be515df11e1
SHA256

347e22cba1621709afbdd12dca614ad3d743431b4e3be831de9cd29dc847533d
SHA512

3695f049ad09f12d61af93cf86dee2d11edc5033d8d6a18669dca2a3958d3914d399dbdb70fa7887ad02add5f8d6ea41b8cf05226cc0c1c1cc62fba1097ea0a4
SSDEEP

768:UHfQEFfxptZ0CMLi89BQ10g9BblziQzGleTA8Kd7u7ZA+KWnJTAim:U/lVnMO89MFbNhzCecZu7Zuim

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f814badfc8436fa8126af320618621f_JaffaCakes118

Files

6f814badfc8436fa8126af320618621f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e6072e30894c5aebbe5d29f99c3613d2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
WriteTapemark
SetLastError
IsBadStringPtrA
BackupSeek
BackupRead
lstrcmpiW
ShowConsoleCursor
SetConsoleDisplayMode
GetCalendarInfoW
SetConsoleTitleA
GetUserDefaultLangID
ExitThread
FreeConsole
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.code
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ