852c6dcc15cd3c8754ace81fd5045b0e_JaffaCakes118 | Triage

Sharing

General

Target

852c6dcc15cd3c8754ace81fd5045b0e_JaffaCakes118
Size

292KB
MD5

852c6dcc15cd3c8754ace81fd5045b0e
SHA1

bddff307ec242f31b431398150163517aeb4c8eb
SHA256

103281870699195ce5853fb2f869da6d98051c680c8be71efffe387c78e2be47
SHA512

487c2094a71fc4f21810715b5940f96847870f183b5de4c9b532e03f22c743947452c48eb2859e5330e78baf153474ffadb9d1e0be034c66567b581244d6576e
SSDEEP

6144:cWoJRa9/UdlmXinjBM+69yiq1ZN9pxKK/hHmDVR:JKRCyGPO3xZhHYX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
852c6dcc15cd3c8754ace81fd5045b0e_JaffaCakes118

Files

852c6dcc15cd3c8754ace81fd5045b0e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5057dc6043b06f3720c508f6a32a574d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
LoadLibraryA
GetLastError
GetProcAddress
GetModuleHandleA
GetCommandLineA
IsBadReadPtr
VirtualAllocEx
ExitThread
IsBadHugeReadPtr
ExitProcess
GetCommandLineW
LoadLibraryExA
GetOEMCP

Sections

CODE
Size: 268KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ