46f223a2a76c90ee87504d2d8ac767fb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46f223a2a76c90ee87504d2d8ac767fb_JaffaCakes118
Size

29KB
MD5

46f223a2a76c90ee87504d2d8ac767fb
SHA1

ecd21e8b1493213174079459614a480e6aebd45e
SHA256

79c30183b3cd6805951b9c219f8390854a12b18aa1177a734d408a031b3d297b
SHA512

470517de6a23667ffe8807ba9ffedcd0cbffe2e0d4afef920f6e1e24f9db865d6d4624b294af47fd92bbb2aacfd0a5bdcb51231e94a91711a1bce0ee1b5acde7
SSDEEP

768:a4PvWkqnTO6gfkMsGR6u6UYS6uMnun+IPaFEUye:a4PvWkqTOHfkMsGR6vW6uL+IPZLe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46f223a2a76c90ee87504d2d8ac767fb_JaffaCakes118

Files

46f223a2a76c90ee87504d2d8ac767fb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

57076d0cbc5159dde86270ab7a1976ae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
VirtualProtect
GetTickCount
RequestDeviceWakeup
SizeofResource
LockResource
FreeResource
GetCommandLineA
lstrcpyA
lstrlenA
GetShortPathNameA
lstrcatA
GetEnvironmentVariableA
CreateProcessA
ExitProcess
HeapFree
GetProcessHeap

Sections

.text
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ