83b74643eb4b55574d7c5039a0e13145_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83b74643eb4b55574d7c5039a0e13145_JaffaCakes118
Size

15KB
MD5

83b74643eb4b55574d7c5039a0e13145
SHA1

3a8095b09ae93b2d46bdedff0e438ff3a67e64a1
SHA256

10aff4fa1cbb31fa994eebccafb61486b564ca842e6bd32d928211d0f1d2442d
SHA512

2330330f0b609f792e5c4b479944f83e1d5ba9072ece5b84cb1bffa717d5883c61bed63d162012eb63a84ff3d022c569642bac46c4599017bddf63d21dbc85db
SSDEEP

192:C27KOb2hDhw1WTIC/OFgLq3FSJkhfAbt4ERSL1r8pcYDA:CMK0KfsC/mVSJkhfAbzR8tOcYs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83b74643eb4b55574d7c5039a0e13145_JaffaCakes118

Files

83b74643eb4b55574d7c5039a0e13145_JaffaCakes118
.exe windows:4 windows x86 arch:x86

47503868e80febee19ebcbfebfbedbf3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter

msvcrt

_strrev
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_getch
_iob
_onexit
_setmode
abort
atexit
free
gets
malloc
printf
signal
strlen
system

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 112B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE