006ee74b6e093948d906d080ad4b6340_JaffaCakes118 | Triage

Sharing

General

Target

006ee74b6e093948d906d080ad4b6340_JaffaCakes118
Size

122KB
MD5

006ee74b6e093948d906d080ad4b6340
SHA1

0e3aa3e9f6108ed73b41e618a98582194c0dd15e
SHA256

324b1e101113481e0cff00a19ab33252b01c77e68c69e4729d5a366b99dab815
SHA512

ef92c4658db6f03805df69481658c456ec49177d59de38c0bd2b26b1a4f48274d8fcf82cbde0496bf8b5b28d30de6448bac96d71f4e455f30547ffffaee99a42
SSDEEP

3072:eg9FQAs8AMJNSjsHgCItEbkXAAO41BIFHdt6tXNS5:+AsgNuIHItE4XAO1B6H4XN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
006ee74b6e093948d906d080ad4b6340_JaffaCakes118

Files

006ee74b6e093948d906d080ad4b6340_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b21ce85c0911ee9633c1dc01e5c38135

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntW
GetPrivateProfileIntW
GetFullPathNameA
GetExitCodeThread
GetModuleHandleA
CreateEventW
ReleaseSemaphore
lstrcmpW
GetEnvironmentVariableA
GetDiskFreeSpaceW
GetFullPathNameA
HeapCreate
GetVolumePathNameA
CreateDirectoryW
CloseHandle
OpenMutexA
GetPrivateProfileSectionW
WaitForMultipleObjects
CloseHandle
CloseHandle
LoadLibraryA
GetFileAttributesW
lstrcmpiW

certmgr

DllRegisterServer
DllGetClassObject
DllCanUnloadNow
DllUnregisterServer

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zdata
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ