392a27ca841249659a7189f1b3c90ad7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

392a27ca841249659a7189f1b3c90ad7_JaffaCakes118
Size

135KB
MD5

392a27ca841249659a7189f1b3c90ad7
SHA1

a7db70caf8b834cd8c10b18616414613f6d2d18a
SHA256

7067ceb6c55da31a0819acac370bfef71d10d4e65290d3ece217e09630c9d26b
SHA512

c7fc8a8860858263c9728849462f7c77b2bdf50415533fc2858744b4ffd4d559314600af2e5f1c69579253b0c5873c2e802cec54c9b6e2232a1447745584a714
SSDEEP

1536:LVStC8tXIyTFQEfRrcE1vNvSTta1mYn8ENOJCiCHESaSMwrDn2qx13sK2DNYPAVJ:udZTFFJoa1hOJCHHESaSjrD7PGYUow

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
392a27ca841249659a7189f1b3c90ad7_JaffaCakes118

Files

392a27ca841249659a7189f1b3c90ad7_JaffaCakes118
.exe windows:1 windows x86 arch:x86

07aa02a6efc4c8d887252150dea78fbe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
lstrcatW
GetWindowsDirectoryW
CreateFileW
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualAlloc
ExitProcess

Sections

.text
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 783B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 417B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 94B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ