04d808b5f63a3d7ada525f5bd5a6679f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04d808b5f63a3d7ada525f5bd5a6679f_JaffaCakes118
Size

78KB
MD5

04d808b5f63a3d7ada525f5bd5a6679f
SHA1

860a75a04397f2454b5fa23ecc896b7f7a60d4f9
SHA256

c48b09b874c03481668c36c3ab0646ea981dce7c532287ae11bdb4b3d61c97bd
SHA512

c50af13d431f75f30e7d8c6e2c0cc6370ac4d9ad6ab648bbd571513c6b4c8a027599e66ec6095125a44db1c6393dec355d9f53402d375a91a69225e1b0db4911
SSDEEP

1536:svPoQ6Vw+/OuQFEo/bDgVEYjKr2j6+xNQ1Pifw2ZCql2j:svwXVw+/OJEo/QEYuU6+xNQ1Pi4ehlu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04d808b5f63a3d7ada525f5bd5a6679f_JaffaCakes118

Files

04d808b5f63a3d7ada525f5bd5a6679f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

adc28dd16b37825a8f6f4e4dbeb9d3fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fopen
malloc
strlen
__set_app_type
fclose
sin
__getmainargs
__setusermatherr
_adjust_fdiv
_exit
free
exit
_onexit
sprintf
_XcptFilter
_vsnprintf
fputc
_initterm
realloc
strcmp
_snprintf
fwrite
fprintf
_acmdln
__p__commode
_except_handler3

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ