f5424a0f52b251412b68a7a58a46b2fa_JaffaCakes118 | Triage

Sharing

General

Target

f5424a0f52b251412b68a7a58a46b2fa_JaffaCakes118
Size

208KB
MD5

f5424a0f52b251412b68a7a58a46b2fa
SHA1

dce15c9cf9d42657f9e254e872d07600935a9c41
SHA256

791174733760fff586db4a52ffdfc757c4e82608d94cb96e9ba4eccce11d550a
SHA512

270be58125c982d043c8f171eb999e8d63f1ddf83096050c4b33db47aeae2e008c1a333c0a1acfad7544efee8554e19c02bd8214c47f3adea7b68e91772c6817
SSDEEP

3072:OfbrnCr2AGPSwfYsMmU4+bBKlgqf9NN2oJbBBMm0jlLYrpUhHs/TBfpLVe+BJ:i7TA2VMq+bUlzfN2etBaVYfpLVrB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5424a0f52b251412b68a7a58a46b2fa_JaffaCakes118

Files

f5424a0f52b251412b68a7a58a46b2fa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e984a924ea62ff89a7942057948e731a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
IsBadReadPtr
GetOEMCP
ExitProcess
IsBadHugeReadPtr
LoadLibraryA
VirtualAllocEx
GetACP
GetCommandLineW
ExitThread
GetModuleHandleA
GetProcAddress
GetCommandLineA
GetLastError

Sections

.text
Size: 184KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ