223931d6ad3f6e83cd3260c1f66f5d0c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

223931d6ad3f6e83cd3260c1f66f5d0c_JaffaCakes118
Size

298KB
MD5

223931d6ad3f6e83cd3260c1f66f5d0c
SHA1

8242855ad37ddc00e00616e7488957a32dd2e410
SHA256

c52117ef20cc76c242729c4b464ae8b06186e45441d7194582e668fe4e35cc8d
SHA512

0d77e277785519e11392d0c9a9ecde0b241942f16d7782f30c32454ec6365da0229d0cd41bb78a490946e3cbd1efb1b37f721694411b55f2c68b6c05ae134241
SSDEEP

6144:Q/taVnzSkadPfQo8kyNISDCMAjh3PgGuopILKs621Sk5g8d8zA:Q/tMurPhQBAV3PgX4a1J1b5g9k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
223931d6ad3f6e83cd3260c1f66f5d0c_JaffaCakes118

Files

223931d6ad3f6e83cd3260c1f66f5d0c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e54bd6d7e1f8cc11634350917c4eef06

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA

Sections

.text
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 263KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

5uzu5dg7
Size: 60KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

r0lg04b4
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ