153e65f84e606cbfa271f456c96544e9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

153e65f84e606cbfa271f456c96544e9_JaffaCakes118
Size

184KB
MD5

153e65f84e606cbfa271f456c96544e9
SHA1

7e758dc46ddb980c3879b05aa903d31ccb08c311
SHA256

e1a9ad6e89b63809f3f8405b1978fae1089f48797451eead777e26ead36c0045
SHA512

902a2fe493cd3c9eb59adbf51e2797ab58a1e0c06198b5b3fd53a6fe3e314934889b1a099dfc32bdb82b6efc8df62358b440d7024f614e6dac8472690f1472d7
SSDEEP

3072:Mb5UIrZVWtQ2wT8Zc/uPIgCzk0PykMzSUBrAe6wyIfyGPkwJtScq:MnrZcwT8ZcSIgAVPy1seIG8Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
153e65f84e606cbfa271f456c96544e9_JaffaCakes118

Files

153e65f84e606cbfa271f456c96544e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

046005d471da2ca90000d6ed99e9246e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
lstrcatA
GetOEMCP
GetTickCount
GetModuleHandleA
GetCommandLineA
GetStartupInfoA
GetACP
VirtualQuery
LoadLibraryExA
lstrlenA
VirtualAlloc
ExitProcess
FindClose
VirtualAllocEx

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 127KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ