12f43e315810c987edd7c94ab72f3d99_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12f43e315810c987edd7c94ab72f3d99_JaffaCakes118
Size

108KB
MD5

12f43e315810c987edd7c94ab72f3d99
SHA1

dfe8bd88df2e6f00fa57e8f5888201b6ec91fd1d
SHA256

299d5bd2c8b6b9b01d940e68b5016fbc5ba81a81c384d9660ca921a199a27c0a
SHA512

7821a5dbd07dd7c26147c1ec5dc15583268dc78f62f9af7e8aae7d726fadd5658941da66a51a5ce3ac043a5e00cd0b84b5a3854c071e32a3ef37fb707bbad3f5
SSDEEP

1536:XUoQWLDOAO0+IjSGYxOMz8y65PZscftDp5zWyvUkUZ5Adoy+tU:EoQk8IjSxnzV1cFDpQyv/U3Adui

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12f43e315810c987edd7c94ab72f3d99_JaffaCakes118

Files

12f43e315810c987edd7c94ab72f3d99_JaffaCakes118
.exe windows:1 windows x86 arch:x86

07aa02a6efc4c8d887252150dea78fbe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
lstrcatW
GetWindowsDirectoryW
CreateFileW
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualAlloc
ExitProcess

Sections

.text
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 783B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 417B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 94B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ