b9c56cf7161bc9043a42160e9b7cf75e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9c56cf7161bc9043a42160e9b7cf75e_JaffaCakes118
Size

132KB
MD5

b9c56cf7161bc9043a42160e9b7cf75e
SHA1

56ca69cf532b39964e9a1949bcb872cd04a4f65b
SHA256

0332b562877707159b70375b061273924464ac4a67908fa7596d2fc10cab660f
SHA512

396f73b1121e82b8b26d7fd5fc3333c025c0f133d83a308d3d32fb3d086726db5a0b073ab5cab6239be9ab41ca93d8323fec3ff3bbe5ebe939323b791d6d8ca5
SSDEEP

3072:vUzXU7Dm5w1YvRUYJW0UTfYgHXFRXV8RTy:6UKw1/YA0pgHXDXm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9c56cf7161bc9043a42160e9b7cf75e_JaffaCakes118

Files

b9c56cf7161bc9043a42160e9b7cf75e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ba9563838dc385a3646c26bee48c261d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
GetOEMCP
IsBadHugeReadPtr
GetModuleHandleA
GetLastError
GetProcAddress
IsBadReadPtr
GetCommandLineA
GetCommandLineW
ExitThread
LoadLibraryA
ExitProcess
LoadLibraryExA
lstrlenA
GetModuleHandleW
VirtualAllocEx

Sections

CODE
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ