c86b431fe83dd5e1208ddafe2d14c680_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c86b431fe83dd5e1208ddafe2d14c680_JaffaCakes118
Size

22KB
MD5

c86b431fe83dd5e1208ddafe2d14c680
SHA1

ababe250c82fdc20b315d124561d2fc2f560c2f3
SHA256

9ad18ac0a3cc6a94df16f23eb9025f6d6e2afc2a6ef4c54067d153c4709ae71a
SHA512

2e09a049b265a0363831fb7723ab97d091d6b47f1d6cc1921a7fad0ad58049cdc5874fb146bda826b83eacf2b129a8196cf51afc64e56f274dec3b6d6af83c8c
SSDEEP

384:IDj55Ds8Bf8XA/tIYRFxf/iNDZUh1xqg4zYbbEyQSRrB42e9uNQT:O557foAVdZAZUPxqgYoHvRrBXe9uN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c86b431fe83dd5e1208ddafe2d14c680_JaffaCakes118

Files

c86b431fe83dd5e1208ddafe2d14c680_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ce21a577e3c317cbb35d0c65c942c5d4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStartupInfoA
HeapAlloc
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_fmode
_fpreset
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
signal

ntdll

NtYieldExecution
memset
strlen
wcslen

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE