04df2bdc7dea3c6c3666b0424317e0a3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04df2bdc7dea3c6c3666b0424317e0a3_JaffaCakes118
Size

69KB
MD5

04df2bdc7dea3c6c3666b0424317e0a3
SHA1

270d60626c8eb6fecb5c1502a5efee86353fa6c6
SHA256

8b2ff91ca850c5c385c6b54b6f452c647ad710ee6e4065d9262b24055b99282c
SHA512

bca101d54720381ff0f520888aaab8234741c615f3f94a3465a0e450a7005259bb8812bce3540d23c7b78e9e844c8d525b4cf915ea0361731d0b4de10c0d3c3e
SSDEEP

1536:ZVR4RVkCQCphLTb1qGCCQeAhdC9Nj4eHOMq0SHyi:n2fVQCphLvrCwArfepqxHyi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04df2bdc7dea3c6c3666b0424317e0a3_JaffaCakes118

Files

04df2bdc7dea3c6c3666b0424317e0a3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

11904e9e1b8f2fd0455566f294ad0aa2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
fopen
_exit
_vsnprintf
fwrite
exit
strlen
strrchr
__getmainargs
__set_app_type
_XcptFilter
fclose
malloc
strcmp
free
__setusermatherr
_except_handler3
_onexit
_initterm
_acmdln
fprintf
sin
__p__commode

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE