a892df2b447c85cb140a5e442ab55afe_JaffaCakes118 | Triage

Sharing

General

Target

a892df2b447c85cb140a5e442ab55afe_JaffaCakes118
Size

6KB
MD5

a892df2b447c85cb140a5e442ab55afe
SHA1

e2c4f615fae7e89cfe03ecf0e86f164e69587c1f
SHA256

6f4d4da74e23c6926a8159821839bf6e2c9ee42b81286a8da3180ffb9d307391
SHA512

871d308b70eb24625d7c94cbb73dfb9380bf02ab271a42bfea8d0eb073f3b87c21880c77e641797f1bda50e6d7ca3375b3234c99c8c2fd67541c38a8069dd7af
SSDEEP

96:On+H6nkB8f5lhCGI3L29+Oko+jsOcy+yG8gKW:++anZ1LI2LyTpW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a892df2b447c85cb140a5e442ab55afe_JaffaCakes118

Files

a892df2b447c85cb140a5e442ab55afe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ccf2f6a740343a3844bdf1367f0fce51

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ExitProcess
SetUnhandledExceptionFilter

msvcrt

_stricmp
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
atexit
exit
fclose
fgetc
fgets
fopen
fwrite
perror
printf
putchar
setbuf
signal
strchr

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 144B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE