df1776c5a5a646de05795eff204e8ef3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df1776c5a5a646de05795eff204e8ef3_JaffaCakes118
Size

16KB
MD5

df1776c5a5a646de05795eff204e8ef3
SHA1

64381214c606b1a35cec0a31280f202c419a64d4
SHA256

0de919ef5e8e83e2057c479eb4b169ff26fbaf246a688aa52361cda5ba30c12d
SHA512

81700321124f8edf5cafde239094e1630136e2e8a263b8d03c0e42345c5ff4835368bcd032bf7ee84fcde4a8b42e60127a15c8fed5abef5554e9a72e8bb9bd61
SSDEEP

192:yIA4CJwTQeIzDneiW7FqIuKPYVUNJLvXZFgeroC4V:DnCJwMF6iWwI4UzLBqerfi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df1776c5a5a646de05795eff204e8ef3_JaffaCakes118

Files

df1776c5a5a646de05795eff204e8ef3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1470a0ba50e09d10917bc409c9f0af94

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
fwrite
malloc
memcpy
memset
signal
vfprintf

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 196B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE