ef10983cf801dd83525d202dc5cb5fcf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef10983cf801dd83525d202dc5cb5fcf_JaffaCakes118
Size

189KB
MD5

ef10983cf801dd83525d202dc5cb5fcf
SHA1

9d5bcf6bcc641ac1a37146c3f3aa329098633248
SHA256

5bacbb5d3c6ff15360f2323a361116eb32c3d87ef5d6fab71f19fdffd9b8c402
SHA512

5b6b679878bac00a2de901cff270cf4549acf221cb5806207fa355c2ec27703cc4c0119b8c8e44939333317fb12e8dbcf2af2ba63040b2d1e4f41aa3e73c0d70
SSDEEP

1536:g1hui8N8faOD6io0jbVgR5UwaH1O/Ul+MjIr+WJQ9JoED6drnaSoaznzxb+NF4pQ:2huBG0Hl/UFM+b9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef10983cf801dd83525d202dc5cb5fcf_JaffaCakes118

Files

ef10983cf801dd83525d202dc5cb5fcf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

89c2fe5b237c2f39965635ef6f2720ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ExitProcess
GetModuleHandleA
GetProcAddress
SetUnhandledExceptionFilter
Sleep

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
atexit
signal

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 96B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE