83eda7cb1bb77d309de9d45588c8d864_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83eda7cb1bb77d309de9d45588c8d864_JaffaCakes118
Size

100KB
MD5

83eda7cb1bb77d309de9d45588c8d864
SHA1

2caa79545ba95973647f05049377b596a98d0138
SHA256

d8b9168a844fed15ff802e3d461f996515a0b91f555bbeaa9fd31a9e6863291a
SHA512

e4342aa8e844470a1142fcdfeadb401623bf7e102db94a6b0b2ad2e3239df03b0317a6a5666fe007545eb62b7c11d3708ee7872442ec93cdbf5c4e709c9c6635
SSDEEP

3072:yRB3x31R8hS56hrgvHqQBWC3Nj9UQ3+O1p:DhSopgP3BWqNj9l3+On

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83eda7cb1bb77d309de9d45588c8d864_JaffaCakes118

Files

83eda7cb1bb77d309de9d45588c8d864_JaffaCakes118
.exe windows:1 windows x86 arch:x86

5a46e4060b9f772b66742c36b4c1ee65

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA
GetStartupInfoA
GetModuleHandleA

gdi32

CloseEnhMetaFile

msvcrt

_initterm
_exit
_XcptFilter
exit
_acmdln
__getmainargs
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ