555babd4289c720fe89a724688383d4d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

555babd4289c720fe89a724688383d4d_JaffaCakes118
Size

15KB
MD5

555babd4289c720fe89a724688383d4d
SHA1

1aa393da15996db707258d2b62a3ecba2373d713
SHA256

10b2aa1e10a3709ffd8244c135981efa6a14c71f9e42404685593f64eb0cf8bf
SHA512

d2faadeaacbf0013bcbfc5ebc15ee4dfa41d60845344c9057d2efb728b07073d6d9da9eb7cd370fa59f6d00e7762c64af4a1bb33c079cfd106d2aa73d6ed113e
SSDEEP

192:84eamhPi55tdijnC7Fwwh9pwttdLsGjoeyFozC4q:8NPK57fWwhDwpLsGkJaWl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
555babd4289c720fe89a724688383d4d_JaffaCakes118

Files

555babd4289c720fe89a724688383d4d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2b21c6fa03792e857ee3e922515b7068

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memset
printf
signal

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 224B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 636B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE