5c6915e3f76a490b847ca85f739a2403_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c6915e3f76a490b847ca85f739a2403_JaffaCakes118
Size

112KB
MD5

5c6915e3f76a490b847ca85f739a2403
SHA1

6ffaabe31b3869edde82648c5d012c85cbac23ec
SHA256

d8039e2b18a7d6562212e5bf296b25e45e04fd1047b22996c27f47f5619b1335
SHA512

27b5215dfd984f269f8a12979671ca7c2ab18b70b686be389291db28e70e4063f514e5feae9e2259362fef16125dfb985051be8689fd527f7dd42b04f67ebc2c
SSDEEP

1536:I5sWx4G5LyPLK/xpDE+sndJOSRDagHcVhg0Vhz8A2Q+8TvivVQq2jlpF3QD:xeLyEph2dJOSTcV7VJ6Q3TKeq2jlplQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c6915e3f76a490b847ca85f739a2403_JaffaCakes118

Files

5c6915e3f76a490b847ca85f739a2403_JaffaCakes118
.exe windows:5 windows x86 arch:x86

75d97009d875b35ab8b7289a10944dbe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetCommandLineW
SetLastError
VirtualFree
Sleep
ExitProcess

user32

CharNextA

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 266B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ