0e26fe18fb4d1c003f92134709cb7e05_JaffaCakes118 | Triage

Sharing

General

Target

0e26fe18fb4d1c003f92134709cb7e05_JaffaCakes118
Size

170KB
MD5

0e26fe18fb4d1c003f92134709cb7e05
SHA1

655ef562304dab09dc3943560e7e5ad05cd26284
SHA256

01be0fe151f9b7d42f14e2caa0b6c71dc5047487f1b721e7649295ebd29d62e7
SHA512

1a0c2df0f7920ec1f35362a4b717f631f844580cda87d9df8d3e4f2b5f0a608394efb42d21b48be9a104cc3e4db3d6d94dd9cfc8af4451b7729ae697021ea821
SSDEEP

3072:FqJs5o9R33cZafOu5q7bpwam31h06T4ysjGEgzd90owi6m:FKp736u5+bpY3Q6TpsaEgzv046

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e26fe18fb4d1c003f92134709cb7e05_JaffaCakes118

Files

0e26fe18fb4d1c003f92134709cb7e05_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7edc40748865ce97d85e816e431ff648

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
GetCommandLineA
GetModuleHandleA
GetProcAddress
lstrlenW
IsBadReadPtr
VirtualAlloc
IsBadHugeReadPtr
ExitProcess
GetCommandLineW
ExitThread
lstrlenA

Sections

CODE
Size: 158KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 582B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 512B - Virtual size: 422B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ