4e200f1ad549b39e5d846c2f7ee06b6b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e200f1ad549b39e5d846c2f7ee06b6b_JaffaCakes118
Size

169KB
MD5

4e200f1ad549b39e5d846c2f7ee06b6b
SHA1

0d81020cc2252783d8235f17d604ab6ae767f310
SHA256

ab7af7280295fc2b233d571f2a3036fec259a8bbfa2a2390f44982aa85e15b4c
SHA512

8fb159cf21411474e1601b7c73f488956ec6358f482c1111528112a7c7a64d918881ac6adb72d8dac577c1d4dd8691c4ffca9671a80efc79c3954fc96e75ea19
SSDEEP

3072:iEf5MZA7ghgr6WYHnJUoWwsbhUidvHEDR9xJ8nnZ0+aLj:iTFgr4sbhUitH6R9jKqLj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e200f1ad549b39e5d846c2f7ee06b6b_JaffaCakes118

Files

4e200f1ad549b39e5d846c2f7ee06b6b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b43646fe5948e62bca4f3a9563c8ca89

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
ExitProcess
WriteConsoleOutputAttribute
VirtualProtect
GetModuleHandleA
GetStartupInfoA
GetModuleFileNameA

user32

GetUpdateRect
CloseWindowStation

Exports

Exports

CloseSvusdtjcigk
CreateEohadnxj
Pyxpdnaw
Whbmlit
OpenLlqragbnr
OpenKiahrdbhfaf
InitInncvnd
Pyvfvnmnhj
Oqigthkry
CreateLsgrnnhfls

Sections

.text
Size: 7KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rcode
Size: - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata1
Size: 147KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrd
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ