0073cf6ae9cfd90129ab1eda67fe59f6_JaffaCakes118 | Triage

Sharing

General

Target

0073cf6ae9cfd90129ab1eda67fe59f6_JaffaCakes118
Size

6KB
MD5

0073cf6ae9cfd90129ab1eda67fe59f6
SHA1

63f71294285a7bfa0625eb77758f4ed4a95ed6bf
SHA256

000848a4b9da7470eb571fd0849688e746d0204d6ac9685e22a9ad876f735b01
SHA512

2f63baaea536e76c5e9b3a10ee34d2d338e1cebf5fee98a0d631332be19c8bc49e1c2368a4125fba56ad712e1e8ce3019ac546078d8d16543d002e18a2e4a31a
SSDEEP

96:n67ZGVfOSeg7/E1ZnKpTlGq4HDX5aMyiS:6Iresc1ZneMrjJaM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0073cf6ae9cfd90129ab1eda67fe59f6_JaffaCakes118

Files

0073cf6ae9cfd90129ab1eda67fe59f6_JaffaCakes118
.dll windows:1 windows x86 arch:x86

b6c07acf58465e0b15281ce1b6d5b2cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsA
GetModuleFileNameA
CloseHandle
GetProcessHeap
GetSystemDirectoryA
GetVersion
GlobalAddAtomA
IsDebuggerPresent
OpenMutexA
RtlUnwind
WinExec

crtdll

_fdopen
_open_osfhandle
fclose
_cexit
malloc
printf
raise
setbuf
srand
strcat
strcpy

Exports

Exports

_LibMain@12

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84B - Virtual size: 84B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 212B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 872B - Virtual size: 872B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 204B - Virtual size: 204B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE

.edata
Size: 72B - Virtual size: 72B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ