301a12a977d55d18af3a1c9752ebe8ba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

301a12a977d55d18af3a1c9752ebe8ba_JaffaCakes118
Size

9KB
MD5

301a12a977d55d18af3a1c9752ebe8ba
SHA1

778e768c583cc10bdd822bf80476268ee7673b95
SHA256

e557fc336fa4a20210601bfd6e10aeac14a84ce21eaf4405269bea6cd9ef67b1
SHA512

242cd93bdf957e0ac23f6d56a8bb16acdecd984864e11173efec99797c0f9fe298d052d741b4dbf1ce9787730955710fbcc391f9ec179a4f896764b83a9bc262
SSDEEP

192:/5cfeAzBCjwbljU0oaCUXl0d8G1luVmZ+5ceuiCy:/5P9jwxjU05CUX2dz+5ceui

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
301a12a977d55d18af3a1c9752ebe8ba_JaffaCakes118

Files

301a12a977d55d18af3a1c9752ebe8ba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

43b178ddfa254235fb59c020309d3b16

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetStartupInfoA
SetUnhandledExceptionFilter
Sleep
VirtualProtect
VirtualQuery
lstrlenW

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
exit
free
malloc
memcpy
signal
srand
strcpy
strtok
time

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 356B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 368B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE