a6d578ecb3d21301151d2f852f4807af_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6d578ecb3d21301151d2f852f4807af_JaffaCakes118
Size

56KB
MD5

a6d578ecb3d21301151d2f852f4807af
SHA1

1e8ee00fa84eeb4db9fcccf670414a003b6e1f67
SHA256

ee7ae34fce6e4470131d37ebf1b42b73d15c6d4241ce0a0586b99de44a8486ea
SHA512

fb23f0c174df3cb150644a883207a3970a20960b691fb7609286645e67cae1fefd1667c8c73cc77fdd35105f87deafb93f546a9233d090a9a16ff488fe6e3b32
SSDEEP

1536:xCcc0wnflQhHB7peuXFUCHv+/kn9dPcuzsorFCy31oz:M/GNKav+/kzcBcQy3w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6d578ecb3d21301151d2f852f4807af_JaffaCakes118

Files

a6d578ecb3d21301151d2f852f4807af_JaffaCakes118
.exe windows:4 windows x86 arch:x86

522cda392697bce632efd2ded2d9371e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RaiseException
OpenJobObjectA
GetExitCodeProcess
GetThreadSelectorEntry
IsSystemResumeAutomatic
LoadLibraryW
CreateMemoryResourceNotification
UnlockFileEx
ValidateLocale
GetFullPathNameA
GetConsoleCommandHistoryW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE