2eed94dde929f2b55bffd628fc6b479c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2eed94dde929f2b55bffd628fc6b479c_JaffaCakes118
Size

29KB
MD5

2eed94dde929f2b55bffd628fc6b479c
SHA1

84656b48bf7ba670c2f575d6c06d5253aa89d0ab
SHA256

5f981afdd86e9c9b0a37b8664d37ac6dfbbb7a48aa89f36b7c851564baf1e1fb
SHA512

3316fae7d569d3c996f59834f1ea4142b607bb7bc1fe2826576e02280597031604bee846f172ba7980629a5522a6fca183ffaa8871adeb16d5347dd62c464382
SSDEEP

384:c/d5cZM7s5JxDTHfRmWOHc62uiQhkZDrMfzDX9:c/fcZfTDT/RmFHZTzkZDAd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2eed94dde929f2b55bffd628fc6b479c_JaffaCakes118

Files

2eed94dde929f2b55bffd628fc6b479c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a425bf72bfa24b3bea4d1a1b8eb7850f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
GetCurrentDirectoryA
SetUnhandledExceptionFilter

msvcrt

_sleep
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
exit
fclose
fflush
fopen
fprintf
free
malloc
signal
strlen

user32

GetKeyState

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 480B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE