ace6b6535820b0b67c87132797df3170_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ace6b6535820b0b67c87132797df3170_JaffaCakes118
Size

36KB
MD5

ace6b6535820b0b67c87132797df3170
SHA1

5af0e44d2e7820e0151cddf8b2c97abe23797ede
SHA256

5e1f572d416a4d2f01d7db870866f30ad2b4eb2122bc2111c35261bbf24c897c
SHA512

c8dade8522e8500099f7d8f09507bff2d0787fa705f09d17a25486f59e5d44b4876423d7dc9e3d23499e44ab9e8f3255b842f7dd9abfa7dddfcc794b9f3825c8
SSDEEP

768:S80Ro93SJMnTnMgZUoOdBEgaGBGrl1Nje8D4EyP:RoMCurMgZUolwGrl15e8DW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ace6b6535820b0b67c87132797df3170_JaffaCakes118

Files

ace6b6535820b0b67c87132797df3170_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f1246d0de8de18613a2ce7e53d055892

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
ExitProcess
InterlockedExchangeAdd
GetEnvironmentVariableA
GetProcAddress
SetEnvironmentVariableA
GetModuleHandleA
RtlUnwind

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE