6fdfdffeb4b1be2d0036bac49cb0d590_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6fdfdffeb4b1be2d0036bac49cb0d590_JaffaCakes118
Size

89KB
MD5

6fdfdffeb4b1be2d0036bac49cb0d590
SHA1

cb059c9bd87fa39c87e06d77f694819d557645eb
SHA256

b132ea55ec4bc8cbfe95f72691d4ab3c49fb6b49603961ade03e9eb276cc9794
SHA512

d825412b3d66823b0776470d7eda2e6ceefbdcc479b49b5a5fff9f926908161c04220580591fefb67795507e644565497f6cb7cd66a449374844dc6b14ded901
SSDEEP

1536:BqhubVydb9wIQkNZBjD58i2X8i2C8i2Q8i298i2O8i2g8i2S8i2g8i2H8i2B8i26:oVO1kNZBjDrYdP61fF38W9lO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fdfdffeb4b1be2d0036bac49cb0d590_JaffaCakes118

Files

6fdfdffeb4b1be2d0036bac49cb0d590_JaffaCakes118
.exe windows:4 windows x64 arch:x64

973f9c9a69d554227abaef0101e09eb9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
CopyFileA
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
ExitProcess
GetProcAddress
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
RtlUnwindEx
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
Sleep
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
FlushFileBuffers
SetFilePointer
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
CloseHandle
GetLocaleInfoA
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

^
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ