b4c40da7222c911cc9228387b4a27b72_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4c40da7222c911cc9228387b4a27b72_JaffaCakes118
Size

7KB
MD5

b4c40da7222c911cc9228387b4a27b72
SHA1

9c9a2c16330a88ddacb69ed0038666cac50c400a
SHA256

19732c2a739bf00a296171d36689797a83650548b35c4001a58efea97197e102
SHA512

2263af85764f676800cb065812a0bd8da9f28638446bff1e9380456c97191f5b555c4b5366af10e4b0f2961f0b74a96ae1a9b17ef601e2816a3b81669c239114
SSDEEP

192:++BXbYiFhduYKgySnunncnnnRiF1EjrjeLnnHmK/hnnn:+6YiDdtVyCiF1EjC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4c40da7222c911cc9228387b4a27b72_JaffaCakes118

Files

b4c40da7222c911cc9228387b4a27b72_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3b1425e295472fb242b799c500784227

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
lstrcatA
GetProcAddress
GetModuleFileNameA
LoadLibraryA
ExitProcess
GetProcessHeap
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

msvcrt

_snprintf

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 466B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ