23da49d088dc2014cb21fefb3b9f9cc8_JaffaCakes118 | Triage

Sharing

General

Target

23da49d088dc2014cb21fefb3b9f9cc8_JaffaCakes118
Size

58KB
MD5

23da49d088dc2014cb21fefb3b9f9cc8
SHA1

d501bbb9518b96b6cee6ecba0b8ec6fc2b78765e
SHA256

d031281d41e2eb068a651edc6bfb65a2ce9f93bbddc1e62519825d9d1b5486a7
SHA512

509674bd85a33adf73d1f8b5f51b48a30962e6fb399467792efd786e89e1a5454fb3fba64d02acbcfede39a49c739bd931019e92a1f83719e955bf521bb7f41e
SSDEEP

1536:AgsW1QoyRQZtQpJG/3n3RzDre4gqtkZ+8kfmQSs/89sHALIErpH:NxAQaJQ3nJgqtqkuQS9wAL5FH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23da49d088dc2014cb21fefb3b9f9cc8_JaffaCakes118

Files

23da49d088dc2014cb21fefb3b9f9cc8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0ae568c1f68955e79f0de279366f7e04

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetCommandLineA
CreateConsoleScreenBuffer
GetProcAddress
InterlockedExchangeAdd
ExitProcess
GetEnvironmentVariableA
SetEnvironmentVariableA
GetLastError
GetModuleHandleA
GetStringTypeA
MultiByteToWideChar
RtlUnwind
GetStringTypeW

user32

GetDlgItem

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 554B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE