0bed2f3682bae48586cb3d0419855299_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bed2f3682bae48586cb3d0419855299_JaffaCakes118
Size

5KB
MD5

0bed2f3682bae48586cb3d0419855299
SHA1

bb29f5f7b45bf50b137f882ac3db7439328abbe0
SHA256

e98c5405995eb7af3e3c1c365d6e182614f591d46ce652ef28a97ec85de45c10
SHA512

b137a37aa7e4b710211c94d5c5500464e9dfbec0d7df0155d2103dc6079b24fe2e6c30eba6d17e400547ad1ec7fa388a085a7233bf8eb29aa8e70cf0f5f62116
SSDEEP

48:6ZhCmvaHqrL9a0KfD4Lfllyobl8WN2N+dVQZKG0sZ86pOEG62/SJayVBt6MLHa:c7aHqXrcIPFNu+fgYJ62/SV36MLHa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bed2f3682bae48586cb3d0419855299_JaffaCakes118

Files

0bed2f3682bae48586cb3d0419855299_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f7c257370f8c7d71fca5151a37dfa80a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter
Sleep

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
signal
sin

user32

GetSystemMetrics
SetCursorPos

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE