dea450ac7b7657816172e450b39ab2f8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dea450ac7b7657816172e450b39ab2f8_JaffaCakes118
Size

6KB
MD5

dea450ac7b7657816172e450b39ab2f8
SHA1

2a5b0889d23b10a8029b4716cd1364518aabe99a
SHA256

8b9fde4597eed9698ddff46b66c3e0869c764ba0ba1adf4d9d04afaf9ccc7934
SHA512

c8c3cd85cde090d422c5f981083ab071174ca957a66811cb2c1d37d6c24f924a42a57a4e6404964b9ea7723cfc9692805b528dd308fc5ad7676d026cc88d4be8
SSDEEP

96:hFlHkYumbjy3Q5ff4+Oo4Td9L2uUOuDZ3sj:jlHkcbWwaTSV3DZ3s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dea450ac7b7657816172e450b39ab2f8_JaffaCakes118

Files

dea450ac7b7657816172e450b39ab2f8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e6d6a230679a6675ead1a8bf92cb01f9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter
Sleep
WinExec

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fopen
fprintf
fputs
free
malloc
memcpy
signal
strcat
strlen

shell32

SHGetFolderPathA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE