b04258a77357396564d888768aecae94_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b04258a77357396564d888768aecae94_JaffaCakes118
Size

40KB
MD5

b04258a77357396564d888768aecae94
SHA1

7ccdaa78a27247ab8d4d3338080f8be16431ffde
SHA256

2e45fe259cef6523a7597fda7bb49fe1022d4882f07973ef6aba83d5a998a37d
SHA512

5d893c5a80a16bb298ba44bf998da47f233220177d100a23bf9091a982b5185b2b45677fbb78e3858bbb67fa10bad68cb5ab4e64523f7d60a3d92ff2c9ad04c2
SSDEEP

384:V94zc3gvBJJ9+oa81WKhryy9BEfqcmT8pB1vuFsIF9lVvHVjBr:V94z5qoa4D9BEycmQpaF/rlf9r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b04258a77357396564d888768aecae94_JaffaCakes118

Files

b04258a77357396564d888768aecae94_JaffaCakes118
.exe windows:4 windows x86 arch:x86

085ba008a964bf80d7693d2b9af18514

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_setmode
signal

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 192B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 64B - Virtual size: 64B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 332B - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ