694f2b27a0cac5d330299499006998e2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

694f2b27a0cac5d330299499006998e2_JaffaCakes118
Size

33KB
MD5

694f2b27a0cac5d330299499006998e2
SHA1

b79bf63944d6e06c1b94b2ffee385883f0ae969f
SHA256

7888cdc56d1a2c37643cf113d3ea86965db701a083ae0064db4851b5b3e1e428
SHA512

bd678e40325d4f10cfb3044fb5c534c0edcc6f58f303b5479dcb4855ce724dc2924aef6bc957fbb1d927fa7f87e184b976274a5453b6129225cd479afab18a67
SSDEEP

768:nLhjMwDT/zLpa22X8WYhvJOJ+zscM5YAT+Mo:ndrfhk8hvJOJ4A5o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
694f2b27a0cac5d330299499006998e2_JaffaCakes118

Files

694f2b27a0cac5d330299499006998e2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

891e96cdb7e8dd010cdcaa031b5b437c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
atexit
signal

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 112B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_MEM_DISCARDABLE

.stabstr
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_MEM_DISCARDABLE