f6f15a9035db049b884cf628a562c9a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6f15a9035db049b884cf628a562c9a4_JaffaCakes118
Size

87KB
MD5

f6f15a9035db049b884cf628a562c9a4
SHA1

b84b3bdb95a96593a2e56f883bb4ebc4f179fa31
SHA256

062efcc1bd79d9f764d7adbf770b45752b3023a4882227d13eee412a55d46893
SHA512

c4f1eecc28ff8d271adb2414ba3fc7aefd212967e135ff2d53e36135410387178eccd5bbab0c6c2a9b9125758c4fee40b98597d464dfc6ed21d7d82cbed313f6
SSDEEP

1536:m1WF4AImPaU6PVudtf2Z9IQxs1QK/wfh7N/xtgDoI+8:a0VImOdudt0jxs1QKYfVdxtCoIp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6f15a9035db049b884cf628a562c9a4_JaffaCakes118

Files

f6f15a9035db049b884cf628a562c9a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

91b9ee1e10403a37844cf13ee7214860

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileExA
GetModuleFileNameA
GetTickCount
FindClose
FindFirstFileA
FindNextFileA
lstrcpynA
DeleteFileA
GetTempFileNameA
lstrcatA
lstrcpyA
MoveFileA
SetFileTime
CloseHandle
WriteFile
CreateFileA
GetTempPathA
CreateProcessA
LoadLibraryA
GetSystemDirectoryA
ExitProcess
Sleep
RtlUnwind

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 82KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE