2a655bfa39caeae8ae7037ea84825362_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a655bfa39caeae8ae7037ea84825362_JaffaCakes118
Size

60KB
MD5

2a655bfa39caeae8ae7037ea84825362
SHA1

4f0b55c8bd968ca801f27f7998770e7123701123
SHA256

67c18c74f5f7e14c3210a3fcfba5551f7b604c85b7bc47d9c4f07634d0686b2f
SHA512

685e874394a34f0f86e361f6a6d2705e8bd158f8554b14a86db7807e2dfbc9eff9af27a6852b08a112fdcde1270f739d2d54502d143189f111a8393ee1baa90d
SSDEEP

1536:Frf7wjfw8zkTWJZI/1cFZJcdoAElU0sRoc0oR3r6wNG8:9wj/zlJg6FZuhoc0Or6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a655bfa39caeae8ae7037ea84825362_JaffaCakes118

Files

2a655bfa39caeae8ae7037ea84825362_JaffaCakes118
.exe windows:5 windows x86 arch:x86

647caf0492555bee12a3a4e4f5cfb198

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
ReadFile
SetConsoleTextAttribute
VirtualProtectEx
ExitProcess

user32

GetTopWindow
GetWindowRgn
GetUpdateRgn

Sections

CODE
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tdata
Size: 256B - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bnvlhq
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ