efa72c480fb47de5ce8321927ef6e4a8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efa72c480fb47de5ce8321927ef6e4a8_JaffaCakes118
Size

326KB
MD5

efa72c480fb47de5ce8321927ef6e4a8
SHA1

64c435fca21d9ff4d18850a13a81ecd400069ca8
SHA256

968d3fd48669381f60bda178dc1750ccad57bbbf48bded321d920c579ff46642
SHA512

ac0df93c9d74bb012aeaef9a818d223f215032f38428aed6b7de834639da0978f94b42037c42a092ba1b8a672548e056f50fa0880e658c0e783989e922c6f350
SSDEEP

6144:Z373/ZrB3HqdnV2ykZcv/8p8qnIPWr5ym2HhDDIcblAszDPV8sE:J3/BB3HqdIySc68qIPWr5khDDIlKusE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efa72c480fb47de5ce8321927ef6e4a8_JaffaCakes118

Files

efa72c480fb47de5ce8321927ef6e4a8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f21e05129dc91033c5f7f93bbcfb525c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 260KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

7nhr7bh6
Size: 58KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zoqcitik
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ