766e4ca61a76dd58aa2a3eb138cf1969_JaffaCakes118 | Triage

Sharing

General

Target

766e4ca61a76dd58aa2a3eb138cf1969_JaffaCakes118
Size

171KB
MD5

766e4ca61a76dd58aa2a3eb138cf1969
SHA1

f47c4df1d576059dad1db81723bdb04027ba9f5a
SHA256

73a9c1cd0dfc2d915c260f4ae349aebf0ed67a2927f5c5d8aa9d80df23fab6c2
SHA512

1bbbc26f9a65cc5ab972b397d659cc9fe08d6b823407c68d01e6511d3927b652b1e186df2478a3955e89a5d075572eb7eaa7f0deb5ccabf3cc2af4902bd60ff5
SSDEEP

3072:vAzQNg5lozOFXwzR/1ADPaTheD/Z+dLg9Vlk5bYEIU4CRXLKo:W5ltATQPasI4VlcbYHDKX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
766e4ca61a76dd58aa2a3eb138cf1969_JaffaCakes118

Files

766e4ca61a76dd58aa2a3eb138cf1969_JaffaCakes118
.exe windows:4 windows x86 arch:x86

278d90d366ea2cab94deb83babbd22f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
GetACP
IsBadReadPtr
VirtualAlloc
LoadLibraryExA
GetModuleHandleW
GetProcAddress
ExitThread
GetModuleHandleA
LoadLibraryA
GetCommandLineA
ExitProcess

Sections

CODE
Size: 159KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 919B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 1024B - Virtual size: 718B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ