15a575cdc81a66822f5b482562734a1d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15a575cdc81a66822f5b482562734a1d_JaffaCakes118
Size

20KB
MD5

15a575cdc81a66822f5b482562734a1d
SHA1

1c96c3a1d28664a623bdd0d62bf2b7121eb7bb2a
SHA256

a80ef9586eac19fe214f5a31a5fdf9cf402c0af00cc3ab7eca1e57a4c559d521
SHA512

8ed02e477543de49d0eae2d0917d2874d4ed34b5ec08ccb895e3716d13a799046eb5c5c71790c17d54c8cd48c4d8fe95a8b8aab8f0d5ad837716393da005bb3a
SSDEEP

192:8rQJ4BaYOQamShZYzdPVn67FwsRV9uaOXweul77yqCiOon/gZTycOoeyFoWC4q:8rQJyOQa9hZYZ0Wkdrl77q+g91JaVl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15a575cdc81a66822f5b482562734a1d_JaffaCakes118

Files

15a575cdc81a66822f5b482562734a1d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

71ba47ed24a5ff280a4c84ee20c3e5a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memset
printf
scanf
signal

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 496B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE

.stabstr
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_MEM_DISCARDABLE