f567e568b8a55242db6a5ca88b65fdde_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f567e568b8a55242db6a5ca88b65fdde_JaffaCakes118
Size

55KB
MD5

f567e568b8a55242db6a5ca88b65fdde
SHA1

f8d30aa678098d8ca9aeced316f29d7d12a5d602
SHA256

59c75774931baa11845f71dad3f39bbd98d43ca0cff3f7d5608d5af73a22728a
SHA512

7815c047a33b067f7a3308a22724289f249d46d9afae04f57f68bf600611597b6e35725efa9f4f6be845b2f5a81fe50802e2904d9bb0b71625d0082bd3e9a574
SSDEEP

1536:9rQrws8W2d+4xadUkZFeca5P0O3Kh6SVHag:42ZxaNa5sO3/SEg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f567e568b8a55242db6a5ca88b65fdde_JaffaCakes118

Files

f567e568b8a55242db6a5ca88b65fdde_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3816dfd7595743ad1325b7f85374da5c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CommConfigDialogA
GetConsoleNlsMode
InitializeCriticalSection
HeapFree
ClearCommBreak
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE