20e1592a6047a302b6da33fcbfb35714_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20e1592a6047a302b6da33fcbfb35714_JaffaCakes118
Size

393KB
MD5

20e1592a6047a302b6da33fcbfb35714
SHA1

182730c57f3a87058def799cd77c3807e195cdd6
SHA256

97814b3b0a9e09a47d7ee3c3154acb27f61d13dc715264c4c96eef3d42700392
SHA512

e32a8088b909980d16556fe3a57702b0b87ba874f86d4793476a7b2c5b4546f7d660c4d08da4cdbba989efd9a3dd5ca6ebc35a5ac042efc2def19c698360fc53
SSDEEP

6144:Bs2lyGykIDKPQvjqH7TsVFYIQ+b+46JqJCAL4WsXz11PDhTAXBgtL:BsayGHmjqfsVb+449z6BgF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20e1592a6047a302b6da33fcbfb35714_JaffaCakes118

Files

20e1592a6047a302b6da33fcbfb35714_JaffaCakes118
.exe windows:4 windows x86 arch:x86

015e649e082a72a393fb3f9d6e9c06e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
GetModuleFileNameA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
calloc
fclose
fopen
free
fwrite
malloc
memset
signal
sprintf

shell32

SHGetFolderPathA
ShellExecuteExA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 196KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_MEM_DISCARDABLE

.stabstr
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_MEM_DISCARDABLE