d610368cf8884ecaf1ab74373c3879a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d610368cf8884ecaf1ab74373c3879a4_JaffaCakes118
Size

3KB
MD5

d610368cf8884ecaf1ab74373c3879a4
SHA1

acbf885c0d5d0d8de95ddbab27bb6ecd330e6644
SHA256

2b541a95fe9948725c128ee9b99a23c55f5639916095826ab8b9fde838006b9f
SHA512

167b226f2accb3e59bf32f6de0f1c360f3277812679bb5dc1963d11d1236c2830bd77f4af73c2f0feefd713b660c6577f2e9b6fe395fdd629cc38d5d2b04a35f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d610368cf8884ecaf1ab74373c3879a4_JaffaCakes118

Files

d610368cf8884ecaf1ab74373c3879a4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

db7cf603345928deda51206bb8a949c2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCommandLineW
GetProcAddress
LoadLibraryA
lstrcatW
IsDebuggerPresent
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter

shell32

CommandLineToArgvW

Sections

.text
Size: 1024B - Virtual size: 827B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ