0a99012ddb3ebad82a70d559fafc987c_JaffaCakes118 | Triage

Sharing

General

Target

0a99012ddb3ebad82a70d559fafc987c_JaffaCakes118
Size

3KB
MD5

0a99012ddb3ebad82a70d559fafc987c
SHA1

b48072ed9980869b223f05a7e981dfbbc8c7cb24
SHA256

d97687a7e3d9dc2274d2ad1c398907482056f468ab5edd0aa2152784995c28a6
SHA512

3d640d497797d9a0d89c37d6564fe9f79f2396a4ef8dca4e1cfed182db98ae61a3f500304a85a99d05fe2f1686bbd335721fc497413743bc2a4bf1dd1be6378f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a99012ddb3ebad82a70d559fafc987c_JaffaCakes118

Files

0a99012ddb3ebad82a70d559fafc987c_JaffaCakes118
.exe windows:1 windows x86 arch:x86

c43dcc7c24f5da564b9ce5a5b29b5664

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetModuleHandleA
RtlUnwind

user32

DefWindowProcA

crtdll

__GetMainArgs
exit
raise
signal
strchr

Sections

.text
Size: 920B - Virtual size: 920B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 152B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 484B - Virtual size: 484B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE