f6e92ea0c917a170abb77d11e202ccdb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6e92ea0c917a170abb77d11e202ccdb_JaffaCakes118
Size

85KB
MD5

f6e92ea0c917a170abb77d11e202ccdb
SHA1

8f5eedbcb71933956ed9bc109e82b25c6be75e37
SHA256

7fb531e9af6515cdbac2001508966ff0b5d658516351139c0d3ac4aaec5a4893
SHA512

09e5d4b7be894b555f5fa64e9c547dbf6adfb5dcd21e548aef5715a2cd43b5aa94cb328e4455cc8d8395623081f7818dbfd9229d404387c41ebbeccf14d50e41
SSDEEP

1536:b/IiMo8zeFR7gyqKmF7HL91UtWOIMNyylk5loAj2VzjV1+plDesYPmnXZjW1cRYk:rIiMoEeFRB8JZ1UtWpMNdlk5Mzjn+zes

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6e92ea0c917a170abb77d11e202ccdb_JaffaCakes118

Files

f6e92ea0c917a170abb77d11e202ccdb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bb018d24f6e6976af4b9de38b19b2a2b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ScrollConsoleScreenBufferA
RtlFillMemory
GetPrivateProfileSectionNamesW
DeleteVolumeMountPointW
GetCurrentDirectoryA
CreateIoCompletionPort
CreateDirectoryA
CreateTimerQueue
IsWow64Process
ExitThread

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 71KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE