a0f6489e92891bef0bedd29a7c86c85d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0f6489e92891bef0bedd29a7c86c85d_JaffaCakes118
Size

697KB
MD5

a0f6489e92891bef0bedd29a7c86c85d
SHA1

8ea6973b9b8ddcd40bf3ae857ba06b42baae419d
SHA256

c10cb26e87206049754a3f89ebcabe075a55f03ecba6a0b9dd39712978e6240a
SHA512

23c805692331a91094653b8236c49d39f3e5cb38b13dd66e43118caa3a5b7ac38ba0b1bddbf00af053a958fc169a34242103ff8370258213f4dccb1a327d0220
SSDEEP

12288:AbllmEbenvKvWvqUJQKxD0O3VRuWGK0YTA5xsGUczKGAd:AJdbsRczgd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0f6489e92891bef0bedd29a7c86c85d_JaffaCakes118

Files

a0f6489e92891bef0bedd29a7c86c85d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9f0a9ace184bd3da5ab8bedd188ca5ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA
CopyFileA
ExitProcess
FindAtomA
FindFirstFileA
FindNextFileA
GetAtomNameA
GetModuleFileNameA
SetFileAttributesA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
signal

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.stabstr
Size: 634KB - Virtual size: 634KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ