d3e94a4b19bb32684f3d019d387bdfdf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3e94a4b19bb32684f3d019d387bdfdf_JaffaCakes118
Size

63KB
MD5

d3e94a4b19bb32684f3d019d387bdfdf
SHA1

ddbbf0595655da044ae6d401529cb08f1b1ad92c
SHA256

456ca8ef2b8e92ca69cd00d1a7f5cbb4b8f7c0db57a8bccf591342d56f26c418
SHA512

14a6c03a28156dda16872a7857b124182fda0c17198f2b99c4dc0ab65d075557db2dd55d932029e8bfa16bdaa2eab54b5901d4290d4ca5e8cea44c76a73d7cde
SSDEEP

768:fztM6SitAdMZe1kkGRa6fdYYThyCc2Iy6HaVUZWI6+GhpUJyelah5zq8wFVu+A:mKi5GR5fdzVyCky66sWIuhpUBgf2pP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3e94a4b19bb32684f3d019d387bdfdf_JaffaCakes118

Files

d3e94a4b19bb32684f3d019d387bdfdf_JaffaCakes118
.exe windows:5 windows x86 arch:x86

aa9ce5d55ad19504f1582a6d1e877cde

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
lstrcatA
GetSystemDirectoryA
lstrlenA
GetCommandLineA
GetStartupInfoA

user32

RegisterClassA
LoadIconA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.TT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ