a6b1da2803edd1f518b4cf2762412d9a_JaffaCakes118 | Triage

Sharing

General

Target

a6b1da2803edd1f518b4cf2762412d9a_JaffaCakes118
Size

63KB
MD5

a6b1da2803edd1f518b4cf2762412d9a
SHA1

89d4511afbe570417dd4e5634449c6d4b1c810b9
SHA256

6a98163ba0411b07737ea030d2651ef86f224fb120175d8bf008d99b47d2d95e
SHA512

c4ce8dcdd221d5f8722a52d5b48d2a837f54ad27a78916c920a401e2e9b0fa06519b39e2905bd4807812cc6396333c1ccd7686f3f32ad0dd04591e459cb67f4a
SSDEEP

1536:OhtxCM9J2HhN9y4mhxrjJHScI/2FgvKUJMv3n1Zts66Us2p3fy0E:OvwM94BNAJbVIPCtZts66Us2w0E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6b1da2803edd1f518b4cf2762412d9a_JaffaCakes118

Files

a6b1da2803edd1f518b4cf2762412d9a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fd2f3559ab28eaf5a7dd4cb147a31565

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
GetEnvironmentStrings
TerminateJobObject
GetModuleHandleW
VerifyVersionInfoW
GlobalAddAtomA
UnregisterWaitEx
GetTapeParameters
GlobalUnlock
GetTempPathA
SetFileAttributesW
GetConsoleHardwareState

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE