4b849cccb3132e3c643c0211c0a8f120_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b849cccb3132e3c643c0211c0a8f120_JaffaCakes118
Size

15KB
MD5

4b849cccb3132e3c643c0211c0a8f120
SHA1

88371d1457ce13b6013cfb3da9f62326e16c8f59
SHA256

05396dedbbc7ddbf3b73720ed82e52b9e94621f38a1faa4d4f73dcbf425093d0
SHA512

41b37af8ce765b17dde084195905ead798962035fe77ef60dad6da6b592034de3fbae728b03a7b6c94305ad90ed778d093bf6c69f4bf30218d9c1b21a3978b6a
SSDEEP

96:Ul8XDHK3axP2N+nMAfBq2fFp7cJ737MnUDGEnA3bzs5Mm/7ZjGwdwVwlwZwdwUwv:tDHKT0cJ737NE6BD70ILkjyFoVcCDx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b849cccb3132e3c643c0211c0a8f120_JaffaCakes118

Files

4b849cccb3132e3c643c0211c0a8f120_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cc76faba5e34e71af686e8aaba443e7c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
atoi
fflush
fprintf
free
malloc
signal

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE