dfd78cb2d4561835e0c5a887b866053d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfd78cb2d4561835e0c5a887b866053d_JaffaCakes118
Size

9KB
MD5

dfd78cb2d4561835e0c5a887b866053d
SHA1

5eba0fb56f8573b243308f04c472923bfe5790ed
SHA256

13d765247a14e871d6a00ed7e10989380579003bdb1a3cdecce8e7bc2462dbab
SHA512

9ef6c00db73213303778956cf032d3823d684782ea06b816e541b3cf60caeff9f53e2377e0507473b0cd0017af4f8008bd6b5bafbb1efd5b8f1a4854d22f7a7d
SSDEEP

96:VO4OH6XWIajx/4iwkl/L+Hc4lMEEOTdnucpzFjKq0+t7GrW:M4Oa8xgitLYQInHzFuqPBiW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfd78cb2d4561835e0c5a887b866053d_JaffaCakes118

Files

dfd78cb2d4561835e0c5a887b866053d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f7655844a2fac056a60478e0c8928946

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

perl510

RunPerl

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memset
signal

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 240B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE