085958c16a6f6e3c8171683ab1e9d3cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

085958c16a6f6e3c8171683ab1e9d3cb_JaffaCakes118
Size

9KB
MD5

085958c16a6f6e3c8171683ab1e9d3cb
SHA1

8b0aaf6448180cb56264eafc0725f4be6aebcea2
SHA256

5aab4b044d760913715b62538d62ffeabaf6cd9d8ffac26cb42968acec1a3706
SHA512

b60f337f48d859dced46a9909a52d6fa5e594372f23d48c9616938ee105e8b46cb872d4eb5d20d963f525d85982b405a56250f2ac19eb8363d3efd983989961d
SSDEEP

96:PQt4nvEJxCtt8ifvR2KnlTkqs1IHbF0sDnE0/OGo2fi2VpH8PjfjKejC:PQtGEJY+WNpkqs1IR06E01o2fbpaWe2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
085958c16a6f6e3c8171683ab1e9d3cb_JaffaCakes118

Files

085958c16a6f6e3c8171683ab1e9d3cb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b47ba1f3855cc391fef220fab42afc93

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Build1\TUU2011-Update-3\Tools\ApplicationLauncher\Release\ApplicationLauncher.pdb

Imports

kernel32

ExitProcess
GetCommandLineW
GetModuleHandleW
LocalAlloc
LocalFree

user32

MessageBoxW

shell32

CommandLineToArgvW
ShellExecuteW

Sections

.text
Size: 512B - Virtual size: 471B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 529B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ