0143ddc6fe72815621ddbd2064e760bf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0143ddc6fe72815621ddbd2064e760bf_JaffaCakes118
Size

65KB
MD5

0143ddc6fe72815621ddbd2064e760bf
SHA1

61f06e2ad6536c958abbfd9325f66747ecffaa05
SHA256

d8f996b0b3690ad03a2911a7ceee943c783cd9eff46e882e7325b89505c75168
SHA512

863fff85c929fac55f311a3787973e8b9dd6cd9c4edd7c409ce3845648f10dfdb1816680ae66342b5e5df38ff06233ffe177b87cd560912e1d524ce0bfe741d6
SSDEEP

1536:eV3t36xtHSB5pPPpVGS83mK+n6xLAMAsKJx5k7:erqxg5p563oycN/k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0143ddc6fe72815621ddbd2064e760bf_JaffaCakes118

Files

0143ddc6fe72815621ddbd2064e760bf_JaffaCakes118
.exe windows:5 windows x86 arch:x86

909c1e2458e77190fd28c1f37f0ab4b8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
ReadFile
GetLargestConsoleWindowSize
VirtualProtectEx
ExitProcess

user32

GetTopWindow
GetWindowRgn
BeginPaint

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ