0e70ecad66908632017a14a9eb681c27_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e70ecad66908632017a14a9eb681c27_JaffaCakes118
Size

25KB
MD5

0e70ecad66908632017a14a9eb681c27
SHA1

66c444f9176c150f8e397cb4bd82402cb4f66060
SHA256

e7436f306bd2ef72853c980e637b11ce7c2eb32509407efb67c18552263b71bc
SHA512

84fcef9410348b1bb9ad5d6e10ba786d97fc267350ee25bdbed8ca15777f83253c75d6b4c062bfa0039c2e32b97c7144324d09220974fde45b8f15f44e9f7313
SSDEEP

768:zpEocmc484xy2C40qgL9lZGZ5isKl4qR:mXfD4PisKldR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e70ecad66908632017a14a9eb681c27_JaffaCakes118

Files

0e70ecad66908632017a14a9eb681c27_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1737fcd2b2331a0f0e85538c665f7990

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
SetUnhandledExceptionFilter

msvcrt

_fileno
_isatty
_pclose
_popen
_stat
_strdup
_cexit
_errno
_fileno
_fmode
_fpreset
_iob
_setmode
__getmainargs
_stricmp
_strnicmp
_wcsicmp
atexit
exit
fclose
ferror
fopen
fprintf
fread
free
fwrite
getc
getenv
__p__environ
malloc
memcmp
memcpy
perror
printf
putchar
realloc
signal
sprintf
strcat
strchr
strcmp
strcpy
strlen
__set_app_type

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 480B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE