JaffaCakes118_6d3ad9b3fdd260b02d79050ad5bebd5a | Triage

Sharing

General

Target

JaffaCakes118_6d3ad9b3fdd260b02d79050ad5bebd5a
Size

287KB
MD5

6d3ad9b3fdd260b02d79050ad5bebd5a
SHA1

6afc60dfbcc39fa186c7cc9f1e3e53492c166c0b
SHA256

6d0c40c750805bdc8dc986e420507450ab6bf1ff1f27a27950f48decac313be2
SHA512

468396b57f4b00c51b9803bbfaa26013e0aea3a17cd1cf137904f40f98535c9884b6fc8efe0757d70d4b4f60212509ea7517e064e99d2c4a886691c7c61db500
SSDEEP

6144:8BsR4G+igETnf9+dXvqU6KMT+qjFFSswI+pn63GxKkfjG+hAQnAf/qqZ+:8B+4G7fuCU43QswIu6WVy+hD2iqZ+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_6d3ad9b3fdd260b02d79050ad5bebd5a

Files

JaffaCakes118_6d3ad9b3fdd260b02d79050ad5bebd5a
.exe windows:4 windows x86 arch:x86

7a411140b6e277694df2a20fcfdbd6ea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetAtomNameA
LoadLibraryA
HeapSize
SetStdHandle
VirtualAlloc
TerminateProcess
SetUnhandledExceptionFilter
IsValidCodePage
UnhandledExceptionFilter
EnterCriticalSection
LeaveCriticalSection
GetOEMCP
GetLocaleInfoA
GetCurrentProcessId
MultiByteToWideChar
SetFilePointer
WriteConsoleA
GetSystemTimeAsFileTime
GetTimeFormatA
EnumResourceNamesA
RtlUnwind
GetCurrentProcess
GetStringTypeW
HeapReAlloc
IsDebuggerPresent
FreeLibrary
GetDateFormatA
GetConsoleOutputCP
InitializeCriticalSection
GetCPInfo
GetACP
WriteFile
RaiseException

rpcrt4

RpcStringFreeA

shlwapi

SHCreateStreamOnFileW
PathAppendA
PathIsFileSpecA
SHCreateStreamOnFileEx
PathIsContentTypeA
PathCreateFromUrlW

Sections

.text
Size: 147KB - Virtual size: 275KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ