4397dd16597dc6dbd965328d3299f1ed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4397dd16597dc6dbd965328d3299f1ed_JaffaCakes118
Size

117KB
MD5

4397dd16597dc6dbd965328d3299f1ed
SHA1

689f9fc9d9b2c37310650ee05238ed9b6bc39e5b
SHA256

4988117c2961048ef84f9aaf32a85cec436aa5842a28c29ce951044a9af45115
SHA512

216771e6f65edbd5b937fb3bd61beebb4a7e37ac46772cd9626f4267f58e87e80f0d1bd38a63387f7f3231f05b93cf537f78a35d5432fa2dbcc0990265c60b1b
SSDEEP

1536:DGauZKFtltfKy2nt8FMnlZVOzPAdL3510uM4DqRW3zRm4uQr0XC:LHTIaKrVOaLYuMwqRW3zRmX2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4397dd16597dc6dbd965328d3299f1ed_JaffaCakes118

Files

4397dd16597dc6dbd965328d3299f1ed_JaffaCakes118
.exe windows:1 windows x86 arch:x86

07b0a66ab6489c7698d3c017e7755b22

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
VirtualAlloc
lstrcatW
GetWindowsDirectoryW
CreateFileW
GetProcAddress
LoadLibraryA
GetModuleHandleA
ExitProcess

Sections

.text
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ