b6f31978346fa726006b2123ed772ee9_JaffaCakes118 | Triage

Sharing

General

Target

b6f31978346fa726006b2123ed772ee9_JaffaCakes118
Size

76KB
MD5

b6f31978346fa726006b2123ed772ee9
SHA1

a9ce2543f04ebaac5608225a328de778046e28ee
SHA256

1eb394de0ec1f509ecf9ec17a17f2e8a70277d1e06a2988d728b950860999cfc
SHA512

cf4316faa336a694c8024ee4e8dd97f17a9347013a6ee8f47e89c5ef58aa39796955d519e0f2b6912caeb40ef32055bcf8effa7c76224f387e0f0f4f11e781ec
SSDEEP

1536:gbzT4l3AqIuHcMawpfwzbLSwzsUTk+PlOpjVrs2ryrd1vUQuq6:gvTy3dIuHN6fg+PAHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6f31978346fa726006b2123ed772ee9_JaffaCakes118

Files

b6f31978346fa726006b2123ed772ee9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a76afcb52aa9db03f80c7826beef5b0b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
CreateDirectoryW
CreateHardLinkA
DeleteTimerQueueTimer
CreateProcessW
WriteConsoleW
GetConsoleCommandHistoryA
HeapQueryInformation
GetSystemDefaultUILanguage
FindNextFileA
WaitNamedPipeA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE