72efb8ce495abcc5d0513eca8d5cd07a_JaffaCakes118 | Triage

Sharing

General

Target

72efb8ce495abcc5d0513eca8d5cd07a_JaffaCakes118
Size

19KB
MD5

72efb8ce495abcc5d0513eca8d5cd07a
SHA1

5a4653a620a54e229acdc9774e122d201292564c
SHA256

8b8e66d39c2aef111ec17621167dc32c20635e09080bb2340a76fb5a779a60da
SHA512

74259b52f6761413816e1755708bcde23e730e93f3c828aff68112632df1ddea927faa91927314485c78f5fe2f4b3c15ef7735900877e70fcdce9774fe6876a6
SSDEEP

192:rjBPHGypoknDzNDL8EwD1yxDhsC+FpYKkvyFWjcCDi:rjx5XJL8EqoxNZ+FpY/Kwjre

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72efb8ce495abcc5d0513eca8d5cd07a_JaffaCakes118

Files

72efb8ce495abcc5d0513eca8d5cd07a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6f473a70ace66cd8db08f6ed7541ed80

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetConsoleTitleA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
signal
system

user32

FindWindowA
ShowWindow

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE