f6aa87209267f5856478f6a6e8927791_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6aa87209267f5856478f6a6e8927791_JaffaCakes118
Size

1.2MB
MD5

f6aa87209267f5856478f6a6e8927791
SHA1

370e551dabda3529ef7dcd33311cbbb953a49d98
SHA256

d6090b334a40a94456da572e5dd4a438d8643b323632773ead6c04cb4fcc6b6e
SHA512

a0e53aed7d039115f2cd0f0bb01bc11acf3d9568d7eb0faa3fea9d4c1c5cf1dbdd239ff1869689d6aa45c14a696bd7efe32e43bdc01d630e45487fbb27d03eb3
SSDEEP

24576:cyxX0g5cdg0OVnaoL0JlEvclSBcD0SrYdxCNdQ39x9Z5UrJhl7xu:cyxLqC0OFHL0PES0Tdofq6rZU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6aa87209267f5856478f6a6e8927791_JaffaCakes118

Files

f6aa87209267f5856478f6a6e8927791_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dad504744feebf0a6ac3fc913c19dbed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
WriteFile
CloseHandle
CreateFileA
CreateThread
ExitProcess
ExitThread
GetFileSize
GetModuleFileNameA
GetProcAddress
LoadLibraryA
ReadFile
SetFilePointer
Sleep
VirtualAlloc
WaitForMultipleObjects
WaitForSingleObject

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ