33fa9fa9f1ccc28f749ae60ceb21a269_JaffaCakes118 | Triage

Sharing

General

Target

33fa9fa9f1ccc28f749ae60ceb21a269_JaffaCakes118
Size

3KB
MD5

33fa9fa9f1ccc28f749ae60ceb21a269
SHA1

8273163068fa2bd33ee3cfc132aae5f3aab321f1
SHA256

3efb3b56aca2461e6cae6baf1452242797d43fc710a88e406777d47d6a577160
SHA512

d51c4c29d7a54c54467f897f30c092ee753478b2d0ca75a3aff46ecd99d74286ac731e171228511004abeb9b58593011c472c8582fafbebbccb130b28a550d59

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/scribepwd.exe

Files

33fa9fa9f1ccc28f749ae60ceb21a269_JaffaCakes118
.zip
scribepwd.c
scribepwd.exe
.exe windows:4 windows x86 arch:x86

ab05bed3f26214d2b2d8cc6fa0dbcf24

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ExitProcess
SetUnhandledExceptionFilter

msvcrt

_fstat
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
atexit
exit
fclose
fgetc
fopen
fread
fwrite
malloc
perror
printf
puts
setbuf
signal
tolower

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 128B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE