45388ab17a1a6c5f22d8a24543dfe37b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45388ab17a1a6c5f22d8a24543dfe37b_JaffaCakes118
Size

8KB
MD5

45388ab17a1a6c5f22d8a24543dfe37b
SHA1

e7481d3ce15c2a3cc3deb7bdb3de0d21984a7726
SHA256

a5301ae72df5dba5ee84b25392bcb21717af9b30a02f33c935cd3b24b3b53ba8
SHA512

df08b27232ba39c0a039b452a0238df6ace479ecc36e21af8b8eae02d960d2be7e3dd1609d740fd84516756ed623f89cb2ff41eb7744f2ba3c41abb9fc549c61
SSDEEP

96:bQC6HVX3qsYXvSG+Mrxy+nsmqiXqi3dq2aYp1fyMo6SKUpACLFrt31M:kC6HBKJ+fZiN1fyzVKUpt1t3S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45388ab17a1a6c5f22d8a24543dfe37b_JaffaCakes118

Files

45388ab17a1a6c5f22d8a24543dfe37b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

92f8d95bb58dfdf127f05831a5daab32

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
signal

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE