5fda9cb087bf1fab54ceabecf866f405_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5fda9cb087bf1fab54ceabecf866f405_JaffaCakes118
Size

14KB
MD5

5fda9cb087bf1fab54ceabecf866f405
SHA1

3fe6611733f4db6f3dd792a650e89d10ad1a4999
SHA256

9a238ec9e74296a05b66c90d87e59feddeda25a53e9ed085795cdbb1ec8ca927
SHA512

4b8c7fbec0ea350a5fbeebfdb211a6e5f693a3aa5bfbc9cdccd9e1b93c60ebddedc033480aaf71f804f38ea299b84521add6622207a5e8a657b7c1a65fb56be1
SSDEEP

384:bpqkPZSttsQMyYPSNLWtFTz832/gs4UY:VqkYjNSt58JsxY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fda9cb087bf1fab54ceabecf866f405_JaffaCakes118

Files

5fda9cb087bf1fab54ceabecf866f405_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2935e6f17c66a6f079a2005bc56e20d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCommandLineA
VirtualAlloc

Sections

.text
Size: 512B - Virtual size: 71B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 134B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ