56d7c7fc76b5df521c30a39e1899806f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56d7c7fc76b5df521c30a39e1899806f_JaffaCakes118
Size

196KB
MD5

56d7c7fc76b5df521c30a39e1899806f
SHA1

a9fb3c47e820a40ab6e48b6bfa9b86a57bcc996f
SHA256

e8553c97aed49a433e72e61e7362b2b10f5b317d1691e6cdfe7d195a36eb7c2e
SHA512

abcd57576ed28a28b7dbdafc678a32f2da008a77d460ee285642fe83fa8e97ddca8ad1ed70158b34b3f88b4be107d0f9ff841416fbed8f5251c3d62942a72c06
SSDEEP

3072:GVmHcLY0bOVb/S9AJJjWm/73gAZdujVvPdwiWoQmAPSL0RFR0Yu7J:g1bOVrdJh//73TEhPdXAPSGn0B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56d7c7fc76b5df521c30a39e1899806f_JaffaCakes118

Files

56d7c7fc76b5df521c30a39e1899806f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fe1e6c576acc1b15c6ff53296e69202d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
IsBadReadPtr
GetProcAddress
GetOEMCP
GetCommandLineW
ExitProcess
GetACP
VirtualAllocEx
GetModuleHandleA
LoadLibraryExA
GetModuleHandleW
IsBadHugeReadPtr
GetCommandLineA

Sections

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ