1c4de3e9320b08a22622496add6a7c81_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c4de3e9320b08a22622496add6a7c81_JaffaCakes118
Size

56KB
MD5

1c4de3e9320b08a22622496add6a7c81
SHA1

f5603383b3ddeeddc2a67ae4eeb4e262b0578c1c
SHA256

350e07e17b3f34dfd93bff08430d7b9560aeb243cb57f71c706ed4b0c55576fd
SHA512

7b057634ff0ce9f4502976ad060335ae3903d0b824807c6e67500909bf67789f26c886bb79cdf546cf60ec3f63aa246fd2cf3765d52cc99df6e369e88e3e4fe0
SSDEEP

768:SUjKVjl9xw3x6nz7vj1wrc4YfhvUNaeIDl8TWN+liudRUbGwgwISz8ugHpO:SUKJ3zzj1ww4YxiE2CNCifbGwWSgc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c4de3e9320b08a22622496add6a7c81_JaffaCakes118

Files

1c4de3e9320b08a22622496add6a7c81_JaffaCakes118
.exe windows:4 windows x86 arch:x86

28c6ef1128d2dc0d513ddf64919b7716

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rrsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE