729300d25cb536fec186d772fa07b485_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

729300d25cb536fec186d772fa07b485_JaffaCakes118
Size

104KB
MD5

729300d25cb536fec186d772fa07b485
SHA1

8df26df882eb8fc937dc00febf21dd9841375571
SHA256

0de53fc26660653474126dc6a371066d8993237669307a59776673a216f3846d
SHA512

e5c2b8ea0e4191a802c61e67f502d26fffc5a19cc80c445684e085a1bf95199fdd0b8d3ca5e9f2e6d3c00b82cdba3999bb464ea1e148ca2eaec3c2440237130f
SSDEEP

1536:7Vt/UJNoLHLoOTcQpjTGZTg57qCe9oodOOH+r42aeEKIg4:DYC/oQp/GZ87GyodDH+r428Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
729300d25cb536fec186d772fa07b485_JaffaCakes118

Files

729300d25cb536fec186d772fa07b485_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b650d69ba2eb49af97c57821cf08461b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA

user32

LoadIconA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DITAA
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ