75e2527cc476508d4379bca9f31a83be_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75e2527cc476508d4379bca9f31a83be_JaffaCakes118
Size

15KB
MD5

75e2527cc476508d4379bca9f31a83be
SHA1

af6ac77ab3b2d158a996ef9e2c30af5d174be290
SHA256

390ccb8ac6e5e56474ba68370ac4f9f17c1821525cb18a60c8d798b257a7c644
SHA512

0cd11d9e124cbbfbe3d3a91aadafd8ea4d03c4d8abef0d5a9a8cc8f38af354b20d766edae749783e2fc5837afb275fe38b073336974726b0099930b94aab5b36
SSDEEP

192:R4Oa8xgitLYQInHzFuqPBiWyiqIXsP18touF3lcfFf5yqGhHLSX9PF:RhxgitLjm41iqis9QlcffyqaeP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75e2527cc476508d4379bca9f31a83be_JaffaCakes118

Files

75e2527cc476508d4379bca9f31a83be_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f7655844a2fac056a60478e0c8928946

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

perl510

RunPerl

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memset
signal

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 240B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE