15a7d87a47fce993e155187a377c66d2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15a7d87a47fce993e155187a377c66d2_JaffaCakes118
Size

188KB
MD5

15a7d87a47fce993e155187a377c66d2
SHA1

9eba992f822bc8135541e48d9459936d4b9648d4
SHA256

e03d1cc10a7946baec777863653ddae3c76a7ece9af2b41f3e4620f71a0b7fa2
SHA512

b7f248c72ce7637fda09ce64a6c9c77fdffc8704fbb5eaf967433b69d0005eee254440fd7edeb8b53c6c34b7fa7863a2868e77f1a07d7a1693f0b3c461f52858
SSDEEP

3072:SY/z+HuEGiIU1aM+jV7fmN5A4J8i1/1ObngnaPzLJ:SgKHuEGi7HCV7EXySnaP3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15a7d87a47fce993e155187a377c66d2_JaffaCakes118

Files

15a7d87a47fce993e155187a377c66d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fc4ae123adc649b9bed31a950e2191a1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
VirtualAllocEx
GetACP
IsBadReadPtr
GetLastError
IsBadHugeReadPtr
GetProcAddress
LoadLibraryExA
GetModuleHandleA
ExitProcess
GetCommandLineA
ExitThread
GetCommandLineW

Sections

.text
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ