04f55c749da4cd65965e265efb616f1a_JaffaCakes118 | Triage

Sharing

General

Target

04f55c749da4cd65965e265efb616f1a_JaffaCakes118
Size

196KB
MD5

04f55c749da4cd65965e265efb616f1a
SHA1

5e91a4973a9879514e118ffff4ed6690f8855371
SHA256

1245d894a5191790b821dca3af2cbcdafe889f8b1aa8de0e0cb720a5b48f2f22
SHA512

1e75232350ac161bc97f8eb702ceb5e91278b7ef44085e0a6f8f560c99487f4103120e4e800f2a9c146cfdd553f518ea558cce657ac9e19845a61d83a6a82020
SSDEEP

3072:rrnlYS8OsU6OpDGyfFm+Uh1o24pFCKldtO/CZOruopMHndD6COAOy:/epObTp6SFmzLrKlsCSyHN6COAO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04f55c749da4cd65965e265efb616f1a_JaffaCakes118

Files

04f55c749da4cd65965e265efb616f1a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5a49ab45601575a2bf0826d39dc93c42

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadReadPtr
IsBadHugeReadPtr
GetProcAddress
lstrlenA
VirtualAlloc
GetModuleHandleW
ExitProcess
GetCommandLineW
GetLastError
lstrlenW
ExitThread
GetACP
LoadLibraryExA
GetCommandLineA
GetModuleHandleA

Sections

.text
Size: 172KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ