66e288c0a935f8a6eb485bc6b8d58b4c_JaffaCakes118 | Triage

Sharing

General

Target

66e288c0a935f8a6eb485bc6b8d58b4c_JaffaCakes118
Size

277KB
MD5

66e288c0a935f8a6eb485bc6b8d58b4c
SHA1

b1acbb0986a61659e45dd2c13bb17cd43827f719
SHA256

a3b882b2ca441d53a6286bc5ac66d7744793ded35c0d0c2794e028d3d6e17572
SHA512

d85450048f0fa8c0c74c4395cbd385761e4d168d7f616c4cc3b17a0191dca9935bdf975a72852f1126105e59de1160aeea2dfa00ea63439b55d1264fd24ca41c
SSDEEP

6144:KlK46G6JqJCAL4WsXz11PDhTAXBgCz0Xyv:KlKa49z6BgACyv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66e288c0a935f8a6eb485bc6b8d58b4c_JaffaCakes118

Files

66e288c0a935f8a6eb485bc6b8d58b4c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

015e649e082a72a393fb3f9d6e9c06e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
GetModuleFileNameA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
calloc
fclose
fopen
free
fwrite
malloc
memset
signal
sprintf

shell32

SHGetFolderPathA
ShellExecuteExA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 55KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_MEM_DISCARDABLE

.stabstr
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_MEM_DISCARDABLE