75bb41089bdf2009cae98450c6f8a111_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75bb41089bdf2009cae98450c6f8a111_JaffaCakes118
Size

40KB
MD5

75bb41089bdf2009cae98450c6f8a111
SHA1

37277d3d481c5b03f758363b977e931781154fe4
SHA256

2e247f3bc7f8a809ab9d66438001de0979ab987d3354a7d495ff3c19889a919e
SHA512

c86df8b3dfcd48a91c2fd27cfec3717ea93d857e22da99cd2ab6e9f67d84b90656342507d3a019e8a11bee3a680e6081caa91793e4cef0162afb8fe7f8e0ae68
SSDEEP

384:sP4gRTWKsu2i8D8ylfZTMJ3yYlZsVp64NSThageWxceRU:LuDkoiYDsP6JT0geocW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75bb41089bdf2009cae98450c6f8a111_JaffaCakes118

Files

75bb41089bdf2009cae98450c6f8a111_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4278480a3186073fb1ab5bf06d0588eb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
GetCommandLineA
ExitProcess

user32

CharNextA

ole32

CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

SysAllocStringLen
SysFreeString

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE