0e2b01e710bb9ef161fedb2786279296_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e2b01e710bb9ef161fedb2786279296_JaffaCakes118
Size

164KB
MD5

0e2b01e710bb9ef161fedb2786279296
SHA1

f88e61bcbb69eca629432fcad09b0c782ed3d80e
SHA256

4b6854752c69595048e54c4d14779309093ff594385f4b168201c8be6c2405b0
SHA512

81b088e54bdab63d0d58ca2d93715cead4f16855e9aa58ba972fbb27822f641300f995c22ca11165490a9d990ce27670b34cae5efaca33b75cd5ccf9c21e9173
SSDEEP

3072:6q+JyWHKERSYxlU1Qc4PWBeE0vnOuahyTUPUiyo0J1UlOpVN2xZH:6jyWH6YHmTZBwmuahqposuYHNMH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e2b01e710bb9ef161fedb2786279296_JaffaCakes118

Files

0e2b01e710bb9ef161fedb2786279296_JaffaCakes118
.exe windows:5 windows x86 arch:x86

71062bb38e896c3f4140c075628ce828

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
ExitProcess
ReadConsoleOutputCharacterW
VirtualProtect
GetModuleHandleA
GetStartupInfoA
GetModuleFileNameA

user32

GetUpdateRect
GetLastActivePopup

Exports

Exports

Ybjroqdk

Sections

.text
Size: 6KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata1
Size: 144KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrd
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ