f6b243d15b16c2bb9a68417a36804aca_JaffaCakes118 | Triage

Sharing

General

Target

f6b243d15b16c2bb9a68417a36804aca_JaffaCakes118
Size

328KB
MD5

f6b243d15b16c2bb9a68417a36804aca
SHA1

f403f750d9aab7dd292e0c32f57b2f96426c93ea
SHA256

4f2125d9b627d1ff8af99364fef32b6b90b2b07df0a9f0c7c485adf16bbea5b8
SHA512

15ca61831e5081cdbe460b3a3a0008e4f84d281390d214698d68c2ae14b540cabaa71aab784446b8dca953a1626002a069a780314fdd4424b1c72d85810365ca
SSDEEP

6144:gIQrI8jS1nYcps65iC856On1H4Rnn39d8sQBeOYPEYGIR2:NprJzpsGE1HCnT8reOYBG42

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6b243d15b16c2bb9a68417a36804aca_JaffaCakes118

Files

f6b243d15b16c2bb9a68417a36804aca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9ee8cfaa7c0c5c2249986aeb88ac88f4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
GetLocalTime
GetCurrentDirectoryA

Sections

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 263KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

6r2fvixs
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

wzrvbs.s
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ