b6be95904072462505999468908e400e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6be95904072462505999468908e400e_JaffaCakes118
Size

56KB
MD5

b6be95904072462505999468908e400e
SHA1

88e08bbe1b3ed50772760d3e60720fae0f14103a
SHA256

849f0bc0e2f9e2eb4d778e78867a738974bafb11173fabddfa52a3688d6c093e
SHA512

856403c8129369a07eeaec37237191c4ec2153e89aa54114094758d2a2fb2bbfeabf70ecf08cae58ac74481653c8958f9ae502cdda93bcbc9ebc3e019a648f9e
SSDEEP

1536:wlllllnNwaXYx2j9C3W0olpPq8A6UvyFoQdInw2rPqH5FPW23y2zDS:wlllllALgOv+LInjryPWvQ+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6be95904072462505999468908e400e_JaffaCakes118

Files

b6be95904072462505999468908e400e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

04bb456b51f193de9883ea9f873b32c1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SwitchToFiber
CreateProcessInternalA
GetCurrentProcessId
FormatMessageW
ChangeTimerQueueTimer
RemoveDirectoryA
SetConsoleTitleA
FormatMessageW
WritePrivateProfileSectionW
EnumSystemLocalesA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE