65b6806e12cfcd2d26b79179ae816195_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65b6806e12cfcd2d26b79179ae816195_JaffaCakes118
Size

121KB
MD5

65b6806e12cfcd2d26b79179ae816195
SHA1

4e5995171d515e3c9026c0fbd31029fbc9ea995d
SHA256

9616b20953eee5c7fb65901cb02d5231410857b4970156572012bee3c1054d33
SHA512

4c970ce6356f0445b390bdf1b19bfaae11a5ff7fe6812cd781f9e180d7fb7571b212edecccc28249fe3e8b0300262f83e34698174791effd9159df9d66f8396f
SSDEEP

1536:cb4OlTUsNqSSGpLGHi4S3q+t/B5nciwW5izooXZ:yz/GHzS3x/B5nU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65b6806e12cfcd2d26b79179ae816195_JaffaCakes118

Files

65b6806e12cfcd2d26b79179ae816195_JaffaCakes118
.exe windows:1 windows x86 arch:x86

07b0a66ab6489c7698d3c017e7755b22

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
VirtualAlloc
lstrcatW
GetWindowsDirectoryW
CreateFileW
GetProcAddress
LoadLibraryA
GetModuleHandleA
ExitProcess

Sections

.text
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ