23c6dac0a5b71fb25ded5071b593293b_JaffaCakes118 | Triage

Sharing

General

Target

23c6dac0a5b71fb25ded5071b593293b_JaffaCakes118
Size

22KB
MD5

23c6dac0a5b71fb25ded5071b593293b
SHA1

55afa4d15d09c8d524b8969976e189dea81c37be
SHA256

82dd619103a193ac188d09638de175591e6be5bf742fb70d90b5fde59dc25e3d
SHA512

e17dc1cb2efb18611df60ee3ce582d514639f6029eab0c2399d7cf28652ea8d99f03809b5f9da88a83e1468324436f9a0175f48b749f017a8c6b0525a0e1e969
SSDEEP

384:ClMYXCPqYQQzPFZWMQbR6UePMmH3NFp8rk70ezU34IfpVh67IQopgDAZmKlB:hwC5QQz6M5PPd3rpNRzU34YhNpcALlB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23c6dac0a5b71fb25ded5071b593293b_JaffaCakes118

Files

23c6dac0a5b71fb25ded5071b593293b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d3a008f4f08a505723cdb1f0aaf0d3a8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteProcessMemory
VirtualAllocEx
GetProcAddress
LoadLibraryA
VirtualProtectEx
GetThreadContext
CreateProcessA
GetCommandLineA
SetThreadContext
ReadProcessMemory
ResumeThread

user32

GetDC

gdi32

SetTextColor
GetTextColor

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE