d739aedd11bd76452ba36d3aca7bb9c8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d739aedd11bd76452ba36d3aca7bb9c8_JaffaCakes118
Size

12KB
MD5

d739aedd11bd76452ba36d3aca7bb9c8
SHA1

fd62bc836d0f1d50e7f9a3d833336a569089a6e9
SHA256

aeea734b546ef2c9986ec4d3409a81cb7044b6d749333872d28ac462dc486e91
SHA512

4405471ab7ded5bcfaf0da6b2f4445a376ea099fb16ee410ebb1893145c13a80b9c94ee64c5171822ad00d7c92f8be069f3d0212f815d6cc2aed6fa0f9b95ad2
SSDEEP

192:0icmpyMzOMYqtAo6cDuLTB4LXKw3PCPx8op84E2qmN01f:ZyMSM5tN3E1IXKJeozvqmNQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d739aedd11bd76452ba36d3aca7bb9c8_JaffaCakes118

Files

d739aedd11bd76452ba36d3aca7bb9c8_JaffaCakes118
.exe windows:1 windows x86 arch:x86

44ad518ee19be4ae63889e5d1f7ed7a0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind

crtdll

__GetMainArgs
exit
fclose
fopen
fputc
fread
fseek
printf
raise
signal

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 504B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 436B - Virtual size: 436B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE