JaffaCakes118_6866eee9cb71f0f645d6f2272d96c760 | Triage

Sharing

General

Target

JaffaCakes118_6866eee9cb71f0f645d6f2272d96c760
Size

887KB
MD5

6866eee9cb71f0f645d6f2272d96c760
SHA1

b21e9aafefe4075105c57fbe29ffd0a265aed363
SHA256

8a07690ab92973d54e970c0e2ca59e2dc6b25558c5d055ea7f095237cb6119e1
SHA512

9c7137d87ac57936b03e330da8492b09fa4b52e7ac1d54812054ce22a41a6eef23da8e2c005b9ac33b8a1924a7fc2e72c8bd11c5f225309fbbff7384df90cd04
SSDEEP

24576:RBtolXsxkvJu9WAF+QCJifGz9g0AksafgEHEjE7:VoFAF+zJifGzi0AksQHq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_6866eee9cb71f0f645d6f2272d96c760

Files

JaffaCakes118_6866eee9cb71f0f645d6f2272d96c760
.exe windows:5 windows x86 arch:x86

18c89e2ec0a399c68eaedd6551ce71fc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
GetModuleFileNameW
CreateFileW
GetFileSize
ReadFile
CloseHandle
VirtualAlloc
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 882KB - Virtual size: 881KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ