64f8da79a8e3308fccfed8d77b1a9924_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64f8da79a8e3308fccfed8d77b1a9924_JaffaCakes118
Size

30KB
MD5

64f8da79a8e3308fccfed8d77b1a9924
SHA1

fd0d26942b8d536177a0cb5a6d10d347a3309408
SHA256

5f0f102b222ad59fb4dd9906eeb0ea775e635c765bd1297a10d990afae93a56a
SHA512

51912858501a49e480818fd685fde63e7e88fcb9b20cf7ec67d476519b5022217f5868def9e1730c5ca40d9ac1a40f88f970ab483fa333fa26b7d7ba3803d2a9
SSDEEP

768:x5Lj+cRE3R6ebCYPvgAgWLoFRfkBeyj1V193Ueec0v+7X3z9:x16GEh6eNXBkFFkBeyJV1Ic02DJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64f8da79a8e3308fccfed8d77b1a9924_JaffaCakes118

Files

64f8da79a8e3308fccfed8d77b1a9924_JaffaCakes118
.exe windows:4 windows x86 arch:x86

397be31eb8e6b110d028a19bfb811644

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
VirtualProtect
GetTickCount
CancelIo
SizeofResource
LockResource
FreeResource
GetCommandLineA
lstrcpyA
lstrlenA
GetShortPathNameA
lstrcatA
GetEnvironmentVariableA
CreateProcessA
ExitProcess
HeapFree
GetProcessHeap

Sections

.text
Size: 1024B - Virtual size: 962B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ