ae85983510b3612d4ea70c7df999d6c4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae85983510b3612d4ea70c7df999d6c4_JaffaCakes118
Size

40KB
MD5

ae85983510b3612d4ea70c7df999d6c4
SHA1

88b122496b3ec0f0d119dbd896710ad7d6ce820c
SHA256

2eebec930a6eb5497db98409c19381cada0257208f24053972bf6a8246c34ab4
SHA512

60bd8cd00246ddba057516737ec1a7c870cf674fe86aa076bc6a1c3b69faccaa402c486b188557fdc16cc49c00f47ea0ee50b8103e2cb3d479782d020c701456
SSDEEP

384:744gRTWKsB5kcmLOqal4rP8RborQ5taRgRoEh:rrXm78JxtaRGB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae85983510b3612d4ea70c7df999d6c4_JaffaCakes118

Files

ae85983510b3612d4ea70c7df999d6c4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4278480a3186073fb1ab5bf06d0588eb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
GetCommandLineA
ExitProcess

user32

CharNextA

ole32

CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

SysAllocStringLen
SysFreeString

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE