JaffaCakes118_6b4acaaf3539c92bcf89df2d011f7080 | Triage

Sharing

General

Target

JaffaCakes118_6b4acaaf3539c92bcf89df2d011f7080
Size

602KB
MD5

6b4acaaf3539c92bcf89df2d011f7080
SHA1

10e029131670dccc4eabe97047ef4e71c8f77839
SHA256

3f019bbc851fab085db708dc4ea98a6981d0c48506d24b17d15e26f102b4aec1
SHA512

e31d89d7170784c9ec430acfdff88ffd7897d0f110c526f31b97931c0c45ec753aa854baff796bcaa2b755eaae5e8566c17a77e5ac34931e9cca809fef2a1c10
SSDEEP

12288:GwOwkFr2oZjUDNpebMxDU7syqEz6X9kvmG4K3jct5H/f6AX8eiZXZBVVW0:GwOwkFrZ+N8IxBE6G4OjcL6E8l1zP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Simple BTC Trader v1.3/Simple BTC Trader v1.3 [Trial Version].exe

Files

JaffaCakes118_6b4acaaf3539c92bcf89df2d011f7080
.rar
Simple BTC Trader v1.3/Simple BTC Trader v1.3 [Trial Version].exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 488KB - Virtual size: 486KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 552KB - Virtual size: 550KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Simple BTC Trader v1.3/api-ms-win-core-libraryloader-l1-1-0.dll
Simple BTC Trader v1.3/crypt32.dll
Simple BTC Trader v1.3/readme.txt