06a980c3f28d88638daecc9fba6bd844_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06a980c3f28d88638daecc9fba6bd844_JaffaCakes118
Size

697KB
MD5

06a980c3f28d88638daecc9fba6bd844
SHA1

da01386867e8bc5ca17ca20cbb7110752a8f6b09
SHA256

0a00363850a821acf3e3a5ccf4fc62aeac88f38f0f446c1ee6c36ec716a2a5dd
SHA512

05f75cdc0e16f9ddf61c8b6f1684328dc4790c1dd8ff4c0462eb498cd352020382f417d30298cc9eaa3eb29e61b16e09c453b12ac3ef3435167e039d47a49b30
SSDEEP

12288:WyR7aiQxpojjJl39DiRnRwBkoaFf3r0EZpb+DqKD22VKpJo8FLZvOKcLMMKkd+jd:WW7anxOfJiRwC/z0QbKYFLZ+MMKkojdL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06a980c3f28d88638daecc9fba6bd844_JaffaCakes118

Files

06a980c3f28d88638daecc9fba6bd844_JaffaCakes118
.exe windows:4 windows x86 arch:x86

898cdc2a9b46aa3c147d03cd071ad103

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
LocalFree
GetModuleHandleA
lstrlenA

user32

SetWindowTextA
EndPaint
SetFocus
PostQuitMessage
TranslateMessage

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 679KB - Virtual size: 680KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 724KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ