df1817e2622d1aeca01e31b22533ba84_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df1817e2622d1aeca01e31b22533ba84_JaffaCakes118
Size

7KB
MD5

df1817e2622d1aeca01e31b22533ba84
SHA1

43e761e6427225c082876620e3a1660d503ad623
SHA256

d25c0429e4b0259d736c0b0aa877abcc7460143815f0f5a707ac24a1866b8fdc
SHA512

c7a36bb440691b075d4e167128427c38485a834ddc7ba1c8a8de211b2caa4964bde9b38196989e3060a53aeb9e61f50b3f256e7be73eaf0480a9ea0f0987cde8
SSDEEP

192:8b2FNC3hbOdr2jILbXVolyk0nQMO4UZ6GKXvoY:8bC9GulolwRHUZ6GKXwY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df1817e2622d1aeca01e31b22533ba84_JaffaCakes118

Files

df1817e2622d1aeca01e31b22533ba84_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6597f2a970251181104935df5e411237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
CloseHandle
CreateDirectoryA
ExitProcess
FindAtomA
GetAtomNameA
GetCurrentDirectoryA
GetLastError
OpenProcess
ReadProcessMemory
SetUnhandledExceptionFilter

msvcrt

_strdup
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
_snprintf
abort
atexit
atoi
fclose
fopen
fprintf
free
fwrite
malloc
printf
signal
strchr

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE