6f8f14a941c6239e4e7c5edfe461d393_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f8f14a941c6239e4e7c5edfe461d393_JaffaCakes118
Size

39KB
MD5

6f8f14a941c6239e4e7c5edfe461d393
SHA1

285f0d1640b2693fd1d5595f24251f79844b0f5b
SHA256

b311677389f3e0c3fc2e3d90f3178ff9f60f4335d696b6d500059c04c2a02624
SHA512

d759910fff927767748a60201beaf44f41ec1722c17d3e7c24993d167c9adc66cf9c30bc6a092c818a3de1c32393f316f1ae565ff62a8dda35ccfdbb6a90ca63
SSDEEP

768:Hlg9giZcJZP8V7q8mm5jYfUXsw9gycaJM/5uJkpYXSbJqNFh:H0giiJZEE85jsUXBgHa6huJkHY/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f8f14a941c6239e4e7c5edfe461d393_JaffaCakes118

Files

6f8f14a941c6239e4e7c5edfe461d393_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ