0a3ab5a7cdad87fcb4844c530b1f1793_JaffaCakes118 | Triage

Sharing

General

Target

0a3ab5a7cdad87fcb4844c530b1f1793_JaffaCakes118
Size

78KB
MD5

0a3ab5a7cdad87fcb4844c530b1f1793
SHA1

82dab7937f51e9858a6d65d684f29564a2a1fb18
SHA256

b02785a83e56168504dec07692c3ad00d080c6c5dd1afe66115d723ad07cd56c
SHA512

2941e49bf0fdc35a71969143df9c996786368b6969d3d71fcb24534501f7b6924d4a2ccdbacfd0064ef16d09038753ad044fe8d15480e0b5eeee834003d309d7
SSDEEP

1536:/0lkfDPFgDEFdE24i3XXUftPWnCCIDAMssZWNct4ZdPuIVIIAll5:0kfDWEdE9ugt8/M3ZqI4Z1DVIIAl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a3ab5a7cdad87fcb4844c530b1f1793_JaffaCakes118

Files

0a3ab5a7cdad87fcb4844c530b1f1793_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8f9a30e48d51b514623793ed39a0eae0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
_onexit
_initterm
__set_app_type
strlen
printf
fseek
fopen
free
fwrite
fclose
_except_handler3
_acmdln
malloc
_XcptFilter
__setusermatherr
exit
strcmp
__getmainargs
_exit
fread
sin

kernel32

GetModuleHandleW

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ