06fcd10ff30d853f747bcb5df443d951_JaffaCakes118 | Triage

Sharing

General

Target

06fcd10ff30d853f747bcb5df443d951_JaffaCakes118
Size

860KB
MD5

06fcd10ff30d853f747bcb5df443d951
SHA1

8d3139116e860af8c9bc82cc8d54482b1f054658
SHA256

1565c020ad6c7048723de6e38d3587207864af8c8c792e1a0d3ae72941f72d3e
SHA512

3cc75319708e452024ab2b59f1ebf8bec9e3884781701bb1f0c019630305668037ef7b5bf0a81df024f20ff4a4d47c3f607e7b805fdf9276571facd763a3c03d
SSDEEP

24576:jvKyNiKbalhDtP6jsP5uW5PzC85CHz7KNMuSYIWqQ9p:jvKgbyDN6Gv5bC+CP4XIWL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06fcd10ff30d853f747bcb5df443d951_JaffaCakes118

Files

06fcd10ff30d853f747bcb5df443d951_JaffaCakes118
.exe windows:0 windows x86 arch:x86

204693aa89ecdf15c4c069c311cb6852

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

advapi32

CloseServiceHandle
CloseTrace
ControlService
CloseEventLog

kernel32

GetModuleHandleA
CreateFileA
GetLastError
WriteFile
ReadFile
GetVersionExA
ExitProcess
CloseHandle
GetCurrentProcessId
GetCurrentProcess
GetCurrentThreadId
TerminateProcess
CreateThread
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime

Sections

.text
Size: 289KB - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 554KB - Virtual size: 556KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 716KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ