04604dda199e2ebe8414a73bf5cec1a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04604dda199e2ebe8414a73bf5cec1a2_JaffaCakes118
Size

29KB
MD5

04604dda199e2ebe8414a73bf5cec1a2
SHA1

c097c7f17be86dccb0ab0f842033e463538da404
SHA256

d97da7a146fd08aa4ccb5a72ad618fbf52e256aab955f57fec0caea502ea3c77
SHA512

566a977b1070fd3d442ec7db68606593dfaffc74a1085962f13591e73f612702d2ee9380108a9d1dac7f20fddc930430f31daabd404fd2f4e6a977c534d5d5a5
SSDEEP

768:YZtut8ytuBLd/mJmodqGqlZSrgqzHF2bTh6P8JtmUAMGS:SygB4sGqLSUkHoh60JoUA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04604dda199e2ebe8414a73bf5cec1a2_JaffaCakes118

Files

04604dda199e2ebe8414a73bf5cec1a2_JaffaCakes118
.exe windows:5 windows x64 arch:x64

36e22c6ee7f02af9ebfc50599adb2a12

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetModuleHandleA
VirtualAlloc
lstrlenA
GetCommandLineA
GetProcAddress

shlwapi

StrToIntExA

Sections

.flat
Size: 512B - Virtual size: 46B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 234B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ