01b874f2445f2a3eddf49dcdbf0295db_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01b874f2445f2a3eddf49dcdbf0295db_JaffaCakes118
Size

32KB
MD5

01b874f2445f2a3eddf49dcdbf0295db
SHA1

65388c2c5aca5796e559cfb63a38db12ee19f974
SHA256

e777686aa8c4b7d64d6913bdb2d5cb01e55a6987eb658d43a2d25104883d119c
SHA512

b58fbefaec3fbbe98965368b6817aeea10abefc09567266f8cc053a5b18b68b5594749d979f56a27783796b11d930b8838199aa067316c92f94a8a5292c1b334
SSDEEP

768:pQyAA03eeeeGBL+qhplJMT3enxuu4eTKdMRRWN0Df:N+eeeeGN+qdnxL4eTKdMjWN0D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01b874f2445f2a3eddf49dcdbf0295db_JaffaCakes118

Files

01b874f2445f2a3eddf49dcdbf0295db_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4278480a3186073fb1ab5bf06d0588eb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
GetCommandLineA
ExitProcess

user32

CharNextA

ole32

CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

SysAllocStringLen
SysFreeString

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE