f072f487e897e9cb8f8ee35bb76aac14_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f072f487e897e9cb8f8ee35bb76aac14_JaffaCakes118
Size

21KB
MD5

f072f487e897e9cb8f8ee35bb76aac14
SHA1

d8205f9f1bb26ef3519494db23fa7000c892cacf
SHA256

e326578f47872b7ccfc9ca40c4e486c719f7bc98990ea8b1e56bb52baaacaa37
SHA512

e334eef2101538f6fb57ad4140c33a64ec07f172d8b213f330f34b3d3716c832a11480483b4d815c03417a75f21292200b346c5c1db6b149ac2b457406a43d5b
SSDEEP

384:5bYRr9ytKCTY7x7U4zt8vv13WdAvxN03a5UCmbF:5IZeTWe4REv1ZNnjK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f072f487e897e9cb8f8ee35bb76aac14_JaffaCakes118

Files

f072f487e897e9cb8f8ee35bb76aac14_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ed3e65f5919d7c57ca2da3c45eb3fc34

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ExitProcess
FreeLibrary
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
SetUnhandledExceptionFilter
lstrcpyA

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
atexit
signal

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 92B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE