5d47dca8fd499f0a2ab8bdf4f6cd5a7c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d47dca8fd499f0a2ab8bdf4f6cd5a7c_JaffaCakes118
Size

2KB
MD5

5d47dca8fd499f0a2ab8bdf4f6cd5a7c
SHA1

f1d1846dc970fbc9655d9ed932cf2dc4a83138b3
SHA256

8db56ccb4414b8aaf863c981d9e5b6576694dca67fb8171d87377c0e1f00149a
SHA512

03103f8af488f076d6c3db3401c430d2bfc691c7db37da2117017357198f538df38a1245ebe59befed26b0d53b62837aa2c7ac6331a0748823dd0d44a9fc837f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d47dca8fd499f0a2ab8bdf4f6cd5a7c_JaffaCakes118

Files

5d47dca8fd499f0a2ab8bdf4f6cd5a7c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f3a92a78187f98bea6148140bb9f6fe4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
InterlockedExchangeAdd
VirtualProtect
ExitProcess
GetEnvironmentVariableA
SetEnvironmentVariableA
GetCommandLineA
GetModuleHandleA

ntdll

memcpy

Sections

.text
Size: 512B - Virtual size: 330B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 58B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ