f5e8371e82a7d225fff59a56b87b539b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5e8371e82a7d225fff59a56b87b539b_JaffaCakes118
Size

26KB
MD5

f5e8371e82a7d225fff59a56b87b539b
SHA1

05a01ada80891d1c284f438f660bd7ef29135d5b
SHA256

43ccc454875d7658507a85540efdfe914830c0f04902f38ad7046ab6b019c4da
SHA512

9784af7f40ae5af865eb98a819bd7be911b843cfa2548435ad5fbf3ba3d6c13b593a0ea82994d631e85a2418a09f12848320129df799cbdd8a3435bf4cb2e4b3
SSDEEP

384:EySzD+S9AtWDbfmfiTZF7Zb+ZM/CKnC8B8cxg1GCebKbLm12WrqV9il:zXSKtWH+m7p+ZM/Ct8B8MD8Wrqal

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5e8371e82a7d225fff59a56b87b539b_JaffaCakes118

Files

f5e8371e82a7d225fff59a56b87b539b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

25674963217291b4ba7db0a7307a5162

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
GetLastError

shell32

CommandLineToArgvW

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ