0368133af0aed1c2597d154a4f6e2499_JaffaCakes118 | Triage

Sharing

General

Target

0368133af0aed1c2597d154a4f6e2499_JaffaCakes118
Size

188KB
MD5

0368133af0aed1c2597d154a4f6e2499
SHA1

832f33b47a87f25854a84bd8e6f83e6c1bb4cd1f
SHA256

0e35e16e075084b2cc58ac1aa8e5725ce6c72d261c38a3d9776f5b17d7c82e85
SHA512

f2a035730bacda4189f16cdf1be43b31a04491d0e99ac3288d52c3a9cf81a3236540a10b2dd286d9d23d2944fdca940f42c0479a7ed7108cc9dec6bd67096c63
SSDEEP

3072:Sk4FCxJHa9Nd5rUjwyU4iZZcAxRhG8jcQQ1Kqu+FebmG2p4VvJ:S7FCx25wjwte1QQ1Q+0bt8m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0368133af0aed1c2597d154a4f6e2499_JaffaCakes118

Files

0368133af0aed1c2597d154a4f6e2499_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b6b071c57a7dc3ff81561a979c850bb5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetCommandLineA
GetLastError
GetModuleHandleA
ExitProcess
LoadLibraryA
GetCommandLineW
ExitThread
GetProcAddress
GetOEMCP
IsBadHugeReadPtr
lstrlenW
GetACP
IsBadReadPtr
GetModuleHandleW

Sections

CODE
Size: 168KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ