0e0b1878ba5de0e538c27f09389d1b85_JaffaCakes118 | Triage

Sharing

General

Target

0e0b1878ba5de0e538c27f09389d1b85_JaffaCakes118
Size

84KB
MD5

0e0b1878ba5de0e538c27f09389d1b85
SHA1

294d86e2c56021716bb367cc23fcf1ee5c478386
SHA256

2a62ccb2e0248f9c0c915d9b7445ce2fa336e8199535cee1aff3c34383e5519a
SHA512

027cee1bdb60e24df16e20fb6290c3dabb8f895e690861ee0f423fd33c98e6f8ac7b5f41301f9db3b8ca52caec0b1ae29dc44c991c249b4ef6fba5e95f4fa4ee
SSDEEP

1536:OurAjD8eOvSZcIy8Se1gjsSdqlqeZMKnCz/WXajO3mVZPoFgdytKDi49:OurAjQp6ZccSe1As6IqefnyWKjWsZuo3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e0b1878ba5de0e538c27f09389d1b85_JaffaCakes118

Files

0e0b1878ba5de0e538c27f09389d1b85_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8c36ff2e94ce5d3411f04ac5183b61ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

sin
__p__commode
fprintf
fclose
_onexit
_acmdln
__getmainargs
exit
getenv
_exit
fopen
_XcptFilter
__setusermatherr
__set_app_type
_adjust_fdiv
memset
malloc
_except_handler3
strlen
_stricmp
free
fwrite
strcmp
_initterm

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ