0d8857cb94d3fa8a3fbc4e8c13a3df89_JaffaCakes118 | Triage

Sharing

General

Target

0d8857cb94d3fa8a3fbc4e8c13a3df89_JaffaCakes118
Size

29KB
MD5

0d8857cb94d3fa8a3fbc4e8c13a3df89
SHA1

d2bab8e780f142bfb5f95de84bf608a2e0bfab40
SHA256

e49279d291d86f0578e53ccd0105e21c8323fd579729373edb8399da79bf9d42
SHA512

cd5ec946157887a33f2efc7c9a571142968c9c491c9c2e8cf65aeae39fd430adc531636a129fec6d70a50e2ea548c7372c6354ae2581536e7a274f15bb918a26
SSDEEP

384:i1mns8j50GcMJxDTHfRmWOHc62eGQhcaQj8MBzDX9:0mns8j8MTDT/RmFHZDPcaQjJL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d8857cb94d3fa8a3fbc4e8c13a3df89_JaffaCakes118

Files

0d8857cb94d3fa8a3fbc4e8c13a3df89_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a425bf72bfa24b3bea4d1a1b8eb7850f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
GetCurrentDirectoryA
SetUnhandledExceptionFilter

msvcrt

_sleep
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
exit
fclose
fflush
fopen
fprintf
free
malloc
signal
strlen

user32

GetKeyState

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 480B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE