0096175e13eb980a906c69ce94f08e37_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0096175e13eb980a906c69ce94f08e37_JaffaCakes118
Size

4KB
MD5

0096175e13eb980a906c69ce94f08e37
SHA1

6e0eda97e3c7d6217f45d16a6d0239d81679f8f0
SHA256

b760daf72248f86243650b2254a05bdc9c9b450e52d6288ba162e2716b87a924
SHA512

771ae596bde631eaab2d8a637eb00f590913e3b32bb6a95af1f818c5c52fabee49bc37255fc258f9d18e7f414f87eecb238fc9214d1692097f02c7a6be8610c3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0096175e13eb980a906c69ce94f08e37_JaffaCakes118

Files

0096175e13eb980a906c69ce94f08e37_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f7652a9ac752dcc9fc8e23bff9a32cbe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\My Documents\Visual Studio 2008\Projects\GetHardDisk\Release\GetHardDisk.pdb

Imports

kernel32

DeviceIoControl
CloseHandle
CreateFileA

user32

wsprintfA

msvcrt

_controlfp
strstr
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.text
Size: 1024B - Virtual size: 620B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ