32bea71d04ef02d1fb145cb8ae47117a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32bea71d04ef02d1fb145cb8ae47117a_JaffaCakes118
Size

29KB
MD5

32bea71d04ef02d1fb145cb8ae47117a
SHA1

0c12c88b8e52eb9bee9485e8248a40a4bf19c1f1
SHA256

c6ef22211e269151001f5537c3837d39b526c691eb55818e3f9d2512a1c2693c
SHA512

59be6e1d2cd29872afe9e0f7906e5f8270cce7ee8c4a2db002001f351f1f77a1ae87cf41e9c650f6673f4505862b641f735bed64935c49c091f58c6646465c44
SSDEEP

768:pUZc2jCxKSohzXgeiOw+sU1n/WiH+PkinrNv8Wv6dNFr:pUZc2jvSoVs4/WtJal/Fr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32bea71d04ef02d1fb145cb8ae47117a_JaffaCakes118

Files

32bea71d04ef02d1fb145cb8ae47117a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

57076d0cbc5159dde86270ab7a1976ae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
VirtualProtect
GetTickCount
RequestDeviceWakeup
SizeofResource
LockResource
FreeResource
GetCommandLineA
lstrcpyA
lstrlenA
GetShortPathNameA
lstrcatA
GetEnvironmentVariableA
CreateProcessA
ExitProcess
HeapFree
GetProcessHeap

Sections

.text
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ