b607e702009640f20c49f39096e2428f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b607e702009640f20c49f39096e2428f_JaffaCakes118
Size

15KB
MD5

b607e702009640f20c49f39096e2428f
SHA1

5657f1cbde90bf8889043fea86b93ef3e6c0ac7a
SHA256

c8af38b00a549896db3942e9ef4003eb88a38cf1d16a6fc443a9d7a9a9160ac8
SHA512

d4775bbefc8364dae5533b3b95ad9fabcc0b963af714bcd065555e409f9be6d80a86ddb36afb9d4edc82635343bd3580e34eb6d914a4e6bfe422e487a8abed1b
SSDEEP

96:f1xTHa7LSJlVk+AApKGpGAyMrUDOJKx+cDHNYnl44475ou5uRucuNuAuYu+ucukL:NxTHa70AAyJnx4n32uz4uqkjyFWqcCDZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b607e702009640f20c49f39096e2428f_JaffaCakes118

Files

b607e702009640f20c49f39096e2428f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bda1966ee88c2aab752e51b037a9b76c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
GetProcAddress
LoadLibraryA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
signal

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE