11f0ec5521e8d0b30553b83e4638e90b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11f0ec5521e8d0b30553b83e4638e90b_JaffaCakes118
Size

13KB
MD5

11f0ec5521e8d0b30553b83e4638e90b
SHA1

f185a33fe7ce52cc27a825ee11772bb5ffb15c06
SHA256

c923e779b54f0c4fa69c76421c6025d94398a847fc7b0b4e735e90805905fe8d
SHA512

7fc136e5566d666737a285c66cd85005f243a8da8b90c6da30f6a9c796b73fa9c02dbd4028341ee773e3ce7f92744a1b06f4b2d5a49f188fc6138d8611f7bfe7
SSDEEP

192:H4earwB5N9n06dx655nKVqE/xn528dx6vU1gLFnnhlFN:HOwX06dx6fKVT/xn5/x6MQFh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11f0ec5521e8d0b30553b83e4638e90b_JaffaCakes118

Files

11f0ec5521e8d0b30553b83e4638e90b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

851ca00d94628ab22c94d721ab835e2c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetTickCount
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memset
rand
signal
srand
strlen
toupper

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 224B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE