a860af10756ef57de01093aeed35d196_JaffaCakes118 | Triage

Sharing

General

Target

a860af10756ef57de01093aeed35d196_JaffaCakes118
Size

17KB
MD5

a860af10756ef57de01093aeed35d196
SHA1

47783c9d8801871f78d06efb7ad4bd48b38a6dfb
SHA256

72804292aaadca25cee40d5c100c6d67eae6135f1d87e1b9cfabf63810edb0f0
SHA512

8bb68d20453a829e03680863902607d0c63559e27422a2970abc9840c9929be98f174fed22f79a162def49d2fae8c0c41ff23903cff17d465f98c8672ef73cd4
SSDEEP

192:iFHBCz1LArd6I3dsWBBAKpnYCOfj3MUJmCD2:fRLArd6INsWYKpnt+wUJla

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a860af10756ef57de01093aeed35d196_JaffaCakes118

Files

a860af10756ef57de01093aeed35d196_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46bc8893af6f848af8d3eb1b2cdc6d84

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter
WinExec

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fclose
fflush
fopen
fprintf
free
fwrite
malloc
signal

wininet

InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetReadFile

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE