257a3ea541e08048a54c3c8f4f9b5f0f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

257a3ea541e08048a54c3c8f4f9b5f0f_JaffaCakes118
Size

23KB
MD5

257a3ea541e08048a54c3c8f4f9b5f0f
SHA1

82ef6b1694cee3c929735e4a8113cb1ad2e2d15f
SHA256

e1fc71f99e8b9377552caebe0d57420458fc4ab985b39fe184c4e9d649bc040a
SHA512

67a65b6d3fe3b078f9abf4a28274d21a5190e1bcb5097d01c236b4a4b620961d82853bc3e171aa2a887c60d21db02a439f1b0f2029a5a4f2af7a33c0ddbaf3a3
SSDEEP

384:WXdCIlDmtKUPGt9IckSW0sap8SuKF7fT716:UdV4t+9OVkp8K7V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
257a3ea541e08048a54c3c8f4f9b5f0f_JaffaCakes118

Files

257a3ea541e08048a54c3c8f4f9b5f0f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

584e76d619e1f9b7e9719bc6136ae2b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
CreateMutexA
ExitProcess
FindAtomA
GetAtomNameA
InterlockedIncrement
ReleaseMutex
SetUnhandledExceptionFilter
Sleep
WaitForSingleObject

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_fileno
_iob
_onexit
_setmode
abort
atexit
free
malloc
memset
printf
scanf
signal
strlen
strtoul

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 128B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE