06c7740e0014e213a3fb3769bc4a0592_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06c7740e0014e213a3fb3769bc4a0592_JaffaCakes118
Size

51KB
MD5

06c7740e0014e213a3fb3769bc4a0592
SHA1

120573001dbd1ec0d360a72b24072e924a7786a3
SHA256

0a1a848305d2e9e8ab4649fa6be9c6529e00e21b093c029f5a2fba165b22093e
SHA512

8812370cccc24d3cecdf419967323054412f1df91df3caa809f86f414d345205d305e6c75a27ff0e9c46fe9ec00370ff6597a1e238ecac54ef2bc1008935af29
SSDEEP

1536:4r5BbjxA+8yenxIe0iV2XQoUkssAS5/Xh5:Gbbjq+0nxICVPtP0/R5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06c7740e0014e213a3fb3769bc4a0592_JaffaCakes118

Files

06c7740e0014e213a3fb3769bc4a0592_JaffaCakes118
.exe windows:5 windows x86 arch:x86

773d45c1468496235f40d0936a1c1a06

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetServiceDisplayNameA

Sections

.izkrqp
Size: 33KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fyjkt
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dsr
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dej
Size: 512B - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_EXECUTE

.vmp0
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ