254d6d4ca833424ee0cf62aa8f9f3185_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

254d6d4ca833424ee0cf62aa8f9f3185_JaffaCakes118
Size

29KB
MD5

254d6d4ca833424ee0cf62aa8f9f3185
SHA1

d3dd46547b91e0d61bdd15569110af0e972543ba
SHA256

c2fc17080688652b87d38beacba48dcfe5e061480a4514700016c827e9c5f822
SHA512

27cbe6149e3e581f48231306f72cfce9a762883c4a1a06acfe7f915a19516072e77631644b7cd59c54d3a57c09e8cf4490202edadbc50b993570ae5d864ed7f6
SSDEEP

768:JjZc2jExwSeXXgI97LwDq5KIL4LB6DqC8QzvwrhccW:JjZc2j/SIXh9fz5z0Lo9voWcW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
254d6d4ca833424ee0cf62aa8f9f3185_JaffaCakes118

Files

254d6d4ca833424ee0cf62aa8f9f3185_JaffaCakes118
.exe windows:4 windows x86 arch:x86

57076d0cbc5159dde86270ab7a1976ae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
VirtualProtect
GetTickCount
RequestDeviceWakeup
SizeofResource
LockResource
FreeResource
GetCommandLineA
lstrcpyA
lstrlenA
GetShortPathNameA
lstrcatA
GetEnvironmentVariableA
CreateProcessA
ExitProcess
HeapFree
GetProcessHeap

Sections

.text
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ