ac936c8b4517a93cc249e139e7d46b46_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac936c8b4517a93cc249e139e7d46b46_JaffaCakes118
Size

244KB
MD5

ac936c8b4517a93cc249e139e7d46b46
SHA1

19154fddeb4359994fd456575d9f08f52931e770
SHA256

f9b3e2eb1bd24edb2bb4f8e17f1b8ad1ab38582f71b4ddad86ffaaf7abf8f2b3
SHA512

8a526ca054c54a893241136f5438d6379d93f44b83d5016166fa59fee485d175157124f07f79481afc7efc271642d428eb1c3c2d20a654c3b3413fa15a476b97
SSDEEP

6144:5Nef77yNyPz4+Kbv97snnnnKd05u4yp3OrzC+405n1AITNbnntHl:5Nez7+gAbtsnnnnKwuvtszH/JbnntF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac936c8b4517a93cc249e139e7d46b46_JaffaCakes118

Files

ac936c8b4517a93cc249e139e7d46b46_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5454587383f5955f8b76e9de377e2ada

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
Sleep

shell32

CommandLineToArgvW

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ