d6cfaaf10024f9131f3afcb425e386ec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6cfaaf10024f9131f3afcb425e386ec_JaffaCakes118
Size

101KB
MD5

d6cfaaf10024f9131f3afcb425e386ec
SHA1

c668d68446cc5ac676af2ad2c8112f25332c0cb9
SHA256

dc3622ee53b53bae9acf882e7aad2a949d7311b5e3c0c32d54b8abcb34448f01
SHA512

6d576d2e55aa3831efab8220fc1dbab3c0c0256f57d5b2e127f24329abf5165293a22c25699155508d13c823407bdeaa731ca10a8bc796bb8a1b9abea7598ae7
SSDEEP

1536:wjZD/KPrF3SqLm/euz4OOSaZCX1g8Yu8svX5Dx1XgXaxiexkQf6:KZDizMqMeuzOSoCX1C5+7BfxixW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6cfaaf10024f9131f3afcb425e386ec_JaffaCakes118

Files

d6cfaaf10024f9131f3afcb425e386ec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f0673b7b20c205bc3ae275b33c6a7937

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessagePos
CharNextA

kernel32

RemoveDirectoryA
Sleep
VirtualAlloc
VirtualFree
ExitProcess

Sections

.text
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 257B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dsfwer
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ