b6e26892bbfe81f836bb6dfcacb7b86e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6e26892bbfe81f836bb6dfcacb7b86e_JaffaCakes118
Size

83KB
MD5

b6e26892bbfe81f836bb6dfcacb7b86e
SHA1

e3c7455acdbbf83cf8f627fc099d575e9242b7bd
SHA256

a7cf3ad3bdd05db7632be56cca5aede7575b88059f1d82f44d2d64eb5889a563
SHA512

d5bc34e697f0b7e671ba8d45412603ab5801bb2e8a2fa553bdd97931a7731b5cee379659f82367070235e6ba87157a6683852af12ce3a8f65f79f47e994e725e
SSDEEP

1536:0DGoShx0Ny/X5RQyvvPdOg83Ac9TGT0x6RIdjEErxTWDTMqhGKYIZTET8bDQ:uL6CNy/XEy3Pf83JTh6RUjBkMqhGKZTE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6e26892bbfe81f836bb6dfcacb7b86e_JaffaCakes118

Files

b6e26892bbfe81f836bb6dfcacb7b86e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

030ce933f5bf0d5561e404ea27c23fdd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VerLanguageNameA
WriteProfileStringW
FindFirstFileExW
GetBinaryType
GetBinaryType
VirtualAlloc
MapViewOfFile
SetThreadUILanguage
AttachConsole
SetEnvironmentVariableA
FindFirstVolumeA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE