6f9947a7ec5da4ccff19523818ba2f68_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f9947a7ec5da4ccff19523818ba2f68_JaffaCakes118
Size

56KB
MD5

6f9947a7ec5da4ccff19523818ba2f68
SHA1

f8b713f8457357c8724a74b08b382685609d8746
SHA256

7689ace32d5b34db6334210e60b7222355a5ba1760e6490c3424eb95eb8c796b
SHA512

199dc5955b7d4cb578a04ff9e821ca24ce16a9629154d49b07844396ffd0d04590fe8ff062d206397c63645619c019cabb057cd87f5f1d1585b6ffaf127f77b0
SSDEEP

768:iL3FQBu32F10uN13ui0L0FjMQsMCzYF0sT2gk9xbT2zK5mDiIpMpwODJiQ0lYqVZ:qt2rd/snYPSsXijphNbKf2SjFWi27Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f9947a7ec5da4ccff19523818ba2f68_JaffaCakes118

Files

6f9947a7ec5da4ccff19523818ba2f68_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd6e5cfac1115ea7661575ea1da832a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumLanguageGroupLocalesA
GetNamedPipeHandleStateW
GetComputerNameW
BindIoCompletionCallback
FileTimeToSystemTime
CreateHardLinkW
CreateSocketHandle
SystemTimeToFileTime
SetThreadUILanguage
Module32NextW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE