bc66e345e52b00abe1225201ad576d1c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc66e345e52b00abe1225201ad576d1c_JaffaCakes118
Size

25KB
MD5

bc66e345e52b00abe1225201ad576d1c
SHA1

9cae63caa9e01d6101bd4d98774f829da0c2f002
SHA256

47959fa6dbbc1e629c441ce3f027de12ed6636079088409d042125ff092413df
SHA512

1fa32b2c8a12349ce82bce7e33e2384959b60789b9d4066cc017e627dcb339f4aaa1b993abce4f98de079a6af9c13f87215f628402e464f9a04793aab107cbbb
SSDEEP

768:zpEocmc484xy2C40qgL9lZGZ5isKl4qN:mXfD4PisKldN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc66e345e52b00abe1225201ad576d1c_JaffaCakes118

Files

bc66e345e52b00abe1225201ad576d1c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1737fcd2b2331a0f0e85538c665f7990

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
SetUnhandledExceptionFilter

msvcrt

_fileno
_isatty
_pclose
_popen
_stat
_strdup
_cexit
_errno
_fileno
_fmode
_fpreset
_iob
_setmode
__getmainargs
_stricmp
_strnicmp
_wcsicmp
atexit
exit
fclose
ferror
fopen
fprintf
fread
free
fwrite
getc
getenv
__p__environ
malloc
memcmp
memcpy
perror
printf
putchar
realloc
signal
sprintf
strcat
strchr
strcmp
strcpy
strlen
__set_app_type

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 480B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE