3cd8658c40334decf202f02be509b658_JaffaCakes118 | Triage

Sharing

General

Target

3cd8658c40334decf202f02be509b658_JaffaCakes118
Size

7KB
MD5

3cd8658c40334decf202f02be509b658
SHA1

e8e7bc3e4f9bbe33ce0d1a714d0af51a75cdebd8
SHA256

0f56792b1fda7c19271e76b44a932aae0c167d4c7536e2f4cf3b4798831af74e
SHA512

f27dffdaa878aaf10787e901d4fc674bd9ba38d2e0296b6be88862c69388d56d4349f4c7db0a298e60235636376dfed5b285dfe10c02762a8a0548efeca2f377
SSDEEP

192:RDeNGQDi+ed2aMxxPW8H/R2O7jnmcONEGkTMlHx:VeNHDFed2aMxxPW8H/R24jm5NEzTk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cd8658c40334decf202f02be509b658_JaffaCakes118

Files

3cd8658c40334decf202f02be509b658_JaffaCakes118
.exe windows:4 windows x86 arch:x86

209a61942cd8d884512dec813c70810f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
ExitProcess
GetCommandLineW
VirtualProtect
GetModuleFileNameA
WinExec

shell32

CommandLineToArgvW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ