fa98f38af16ca49b0b55505f9e17931e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa98f38af16ca49b0b55505f9e17931e_JaffaCakes118
Size

11KB
MD5

fa98f38af16ca49b0b55505f9e17931e
SHA1

1ce4a824c63d9be3bde89e69506173ec5eb32e31
SHA256

58736160a309fe65f0e71772bedd84b39eb2af2b517a26e00e70499821390f6b
SHA512

2d74d2953ca0a4b46f919dc54e51ef3eb655fb8d51a81b6bcabc3088c1245c47f4c30657a22a848aeed996c60b81d5a7b8225fd5cc0410bc8260713d94086caa
SSDEEP

192:HMawPmh61HAkmOqGc1Zl2+VAUnJxl1THs6xgzgn7jGrkcSURHvYv:HRwPmh6KGcMexDTHfzLcSmHQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa98f38af16ca49b0b55505f9e17931e_JaffaCakes118

Files

fa98f38af16ca49b0b55505f9e17931e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

8483c3242e28ec118ca202ca30d1b1a4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
FindAtomA
GetAtomNameA

msvcrt

__dllonexit
_errno
_iob
abort
fflush
fprintf
free
malloc

Exports

Exports

_Z5Hellov

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ