10deca22033cb50d86ab1f9f62004d9b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10deca22033cb50d86ab1f9f62004d9b_JaffaCakes118
Size

20KB
MD5

10deca22033cb50d86ab1f9f62004d9b
SHA1

1bb5873616b81fe176568e52307ebb8457abc21e
SHA256

bbea32d93c300c1ee020aa39518870ae2a531045a88bf79c544d60d536ea9a5e
SHA512

3c70e34505869a990ee38a32540124aaf21df86817b018e970aee162d8c629f241a5492343d14d1668ffabe4645564d251a26cdc9a66730a2199142772599a92
SSDEEP

192:PRHgDbLx2/f3euUxNogfmIoQkUnJq+PL91Qjyrcrb4CDc:YHx0fOu0fr1kUJNPIewrbvI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10deca22033cb50d86ab1f9f62004d9b_JaffaCakes118

Files

10deca22033cb50d86ab1f9f62004d9b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b1641ae22841b05ec0daae96bedd9b36

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter

msvcrt

_sleep
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
ctime
fclose
fflush
fopen
fprintf
fputc
fputs
fread
free
fseek
ftell
malloc
signal
time

user32

GetAsyncKeyState

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE