a06d9f60c5d15bdd9b9827ecaddb6b64_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a06d9f60c5d15bdd9b9827ecaddb6b64_JaffaCakes118
Size

123KB
MD5

a06d9f60c5d15bdd9b9827ecaddb6b64
SHA1

d389c47de4fa2dd4a3c74642202029ae9033b447
SHA256

0aa324045f2673e073e84310cbd01a2807b88e8d4d488804f00d2c06b0246d8b
SHA512

6cdf422b17db6470f64675ee374226d5d5584eb8a7d066c52c123792f68919420fe64d60febe15d89e7bc49835f6a17abe0be2bc5aaa252d05037ee794d1d9ab
SSDEEP

3072:Vlq/R1gfEzn1S3ZLYn7jPi7FYo22z3yuQ5l:VlkRIYn7mRYo2U3yu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a06d9f60c5d15bdd9b9827ecaddb6b64_JaffaCakes118

Files

a06d9f60c5d15bdd9b9827ecaddb6b64_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0249a6a0570c835b3a4e210b910a600

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

memset
wcscat
wcscpy
strstr
strlen
_strlwr
strcpy

kernel32

lstrcmpiA

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 686B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 454B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ