df3ee0c537d72d838fa9726ec94bac9b_JaffaCakes118 | Triage

Sharing

General

Target

df3ee0c537d72d838fa9726ec94bac9b_JaffaCakes118
Size

32KB
MD5

df3ee0c537d72d838fa9726ec94bac9b
SHA1

072ea1c3489ed64572f3bf161332a3b5abaaca3d
SHA256

a8ca5418d625e4f66438ccda575a2dc55f59a663322b2074ee1cc2add43e778c
SHA512

35e93916005b0c127735fe7a16a7d392e69ee19d11981cf509fb3bcb62cc91fb6559993ee680221441c05c94504dd09a8d12aa4d1e9b1e7bb87605c52b0bc72a
SSDEEP

768:m/8qghy+pJAWb6bFE/l5XvnFSZJCVFzaLifHO4Lqzf:mWhyZb4XPUUVgLivzU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df3ee0c537d72d838fa9726ec94bac9b_JaffaCakes118

Files

df3ee0c537d72d838fa9726ec94bac9b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5c841ad0726b5d6fc90767a86afba208

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
CreateFileA
SetCommTimeouts
VirtualProtectEx
ExitProcess

shell32

StrChrA

user32

HideCaret
HideCaret

Sections

CODE
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tcode
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ