b6033603bae885cd9494740402b70036_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6033603bae885cd9494740402b70036_JaffaCakes118
Size

124KB
MD5

b6033603bae885cd9494740402b70036
SHA1

b903b34d7444da8235f9f1769acad3e608632821
SHA256

9efcc1dc60aafc707d38f6920d10733bf60d6c1885431d2ea67608fb778b45e8
SHA512

958d744bf468403df026322e49023983953a9e9fcd8e394b5e4dfb6502d3242c5800f497fa7c7fd067b7aa39cfe08f5282cc787653e1bc92344c2fe32c3b3a8c
SSDEEP

1536:rxraNEwxK5aRua966kK+Y6c4YAJwfsrKplovoc1mUkHIv0E3gSRKq:r9k0L0AAsr8Koc1mxAgScq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6033603bae885cd9494740402b70036_JaffaCakes118

Files

b6033603bae885cd9494740402b70036_JaffaCakes118
.exe windows:4 windows x86 arch:x86

85da2a0e1d532d0739879951fe33dcb1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
GetCurrentProcess
GetOEMCP
GlobalAlloc
GetLastError
GetCurrentThreadId
ExitProcess
GetCommandLineW
GetModuleHandleW
VirtualAllocEx
FindResourceA
GetModuleHandleA
GetFileSize
GetProcAddress
GetEnvironmentStrings
lstrcmpiA
LoadLibraryExA

Sections

CODE
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ