6fb56ca52ddbb306c64cef90625366e8_JaffaCakes118 | Triage

Sharing

General

Target

6fb56ca52ddbb306c64cef90625366e8_JaffaCakes118
Size

83KB
MD5

6fb56ca52ddbb306c64cef90625366e8
SHA1

1e3e4601b966408930e6dfa39191e48b2337ef70
SHA256

719f2a93ba35a4f8aab1d9286b2b7e7cca694af2bee4402845f9924bc3263ef0
SHA512

e21ded59a9a89a22913ca41b70f3e11d022e4c236aebeef11c4166ab8202d96e8509dc755dbce824a6dea395573541d76b63f9fe4ae31138038aaf2ed8af5fe9
SSDEEP

1536:5Cbf0190ovB52MVvl2qQ1xBZDpUelA4l0a+e+cbGzVTAvDAXfO2X2S:E030o7H27ftLLvRT65TAvGW2mS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fb56ca52ddbb306c64cef90625366e8_JaffaCakes118

Files

6fb56ca52ddbb306c64cef90625366e8_JaffaCakes118
.dll windows:4 windows x86 arch:x86

f2dda16122038a3411aaabb150b9fe12

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
GetVersionExA
InitializeCriticalSection
LoadResource
SetEndOfFile
TlsAlloc
lstrcmpiA
lstrcpynA

Sections

.sforce3
Size: 25KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDATA
Size: 52KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sforce3
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.brick
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ