40ec68040796754852a71b43a30d5044_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40ec68040796754852a71b43a30d5044_JaffaCakes118
Size

6KB
MD5

40ec68040796754852a71b43a30d5044
SHA1

fef70ce1462e61cb303862451ef663fa17e8c602
SHA256

466bfb42f693fe9d9228d5fae4370a0c2d15a9138c80f343b5e307fbb68d2cb5
SHA512

2178f9ce15649e39f5ed518adc55554417bf9400706542cddf41d2c7982f9b933e39181c515b8e6680890bd27549d4dce12105ef8f0da6b304277e35597d3090
SSDEEP

96:eQQjHqX6bI5DmpA+JOVbuGRQxPU52X1fXr3yMN:8jHqkUawJQP1b3yq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40ec68040796754852a71b43a30d5044_JaffaCakes118

Files

40ec68040796754852a71b43a30d5044_JaffaCakes118
.exe windows:4 windows x86 arch:x86

003f77576fa452993d2925b9064b376e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
printf
signal
strlen

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE