555dd4ea3baf0494c222132e770cc38f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

555dd4ea3baf0494c222132e770cc38f_JaffaCakes118
Size

133KB
MD5

555dd4ea3baf0494c222132e770cc38f
SHA1

177bc6eee5c1ccc0a9d9ee67a0560085dd4e2173
SHA256

46902f1a2effadfe081d5c3c618138e1c4634f19aed43a829fae064012136296
SHA512

a2d3b5db3121ed8b40bc3c78ac910ff56cc146e7d907f02930ddc61e5940b4a4dbc7f1ccd4049fce082c2260aa6d4a1ff538576959afcaab5e3a8a8888062106
SSDEEP

1536:LVStC8tXIyTFQEfRrcE1vNvSTta1mYn8ENOJCiCHESaSMwrDn2qx13sK2DNYPAVn:udZTFFJoa1hOJCHHESaSjrD7PGYU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
555dd4ea3baf0494c222132e770cc38f_JaffaCakes118

Files

555dd4ea3baf0494c222132e770cc38f_JaffaCakes118
.exe windows:1 windows x86 arch:x86

07aa02a6efc4c8d887252150dea78fbe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
lstrcatW
GetWindowsDirectoryW
CreateFileW
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualAlloc
ExitProcess

Sections

.text
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 783B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 417B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 94B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ