b6e6ff92ead7a5e037e4ad5b10db3ad0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6e6ff92ead7a5e037e4ad5b10db3ad0_JaffaCakes118
Size

99KB
MD5

b6e6ff92ead7a5e037e4ad5b10db3ad0
SHA1

25a321e4393907c9c6424be2e4896ca4b6d06cb1
SHA256

3b5434e942dd21b734799707d858b8ecc94f4744423b8b382fc3fbf6554eb6c5
SHA512

99bda9ad7590de1d4e9b52488b3031d707cdf98cca9e9ba5147bd8302b7082d7cccd8174700398a42d7f0b1e94463625743c71c9e804eebe30c84fc87f6879f4
SSDEEP

3072:NjeN9UyFm2dMvRpau/OtU2Iz0yiGq3y8bo4YXj:xvkM5MMB0Ljxot

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6e6ff92ead7a5e037e4ad5b10db3ad0_JaffaCakes118

Files

b6e6ff92ead7a5e037e4ad5b10db3ad0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

42e7c14ca48123966bb2bc209b151b7d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__osver
__p__winver
__toascii
__argc
__doserrno
__threadid

user32

MessageBoxA
MessageBeep

kernel32

CreateWaitableTimerW
CopyFileW
DeleteAtom
EnumCalendarInfoExW
DeleteFiber
FatalExit
CreateFiber
GetLastError

Sections

.text
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 422KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE