2a220db0e139de9cc893d9ff370f4fb7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a220db0e139de9cc893d9ff370f4fb7_JaffaCakes118
Size

20KB
MD5

2a220db0e139de9cc893d9ff370f4fb7
SHA1

3c5b9c35fbfb45b0bbd19bf7d1773e0d9fe919d0
SHA256

6dadba007d86ef8d4cd49c17edc2f929eeb4a6553101fee82c14a2b0f0d402c1
SHA512

b2526df9c49485d709da990973d39b75044c296609ab17e0cbacd1f345c49d0f825098fe57f5dbf311f3fbd27d452dd456bcc970c76ad99e2b74b5436a56b8fa
SSDEEP

384:C6W1PhCc4szdCtFx7Q0G/bi4/Iy/QwmzKWETtBLjAgbAI+c4kMIE:9MMszkFyzdB/QriTEgb5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a220db0e139de9cc893d9ff370f4fb7_JaffaCakes118

Files

2a220db0e139de9cc893d9ff370f4fb7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a494c1c1915ce398e1553b76a484359a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ExitProcess
GetModuleHandleA
GetProcAddress
LocalAlloc
LocalFree
SetUnhandledExceptionFilter
lstrcmpA

msvcrt

__p__environ
__set_app_type
_assert
_fpreset
_onexit
abort
atexit
free
malloc

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc1
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc2
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 136B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ