195d0e91a0c80c78f08ec766d91cc5fa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

195d0e91a0c80c78f08ec766d91cc5fa_JaffaCakes118
Size

81KB
MD5

195d0e91a0c80c78f08ec766d91cc5fa
SHA1

6d1ad36d61e3b466b74bdab4fc20b90402ef23d4
SHA256

84c8614208cf106505f70a3a3ec31e4fd7b05728a8cf4e2eb9d529aeeea931c6
SHA512

3e4b15952cf0b1157f804e925ee5d7ff875b4ef6cfa358363b34664ef3ca8f57f698d8a178476cd09c4e51db41fa70aef237bd1109ce502e21f496c130405546
SSDEEP

1536:TchZdrk/eVl8cZbUouEFRX3E6UxQGQy9T8kJZn/JV2w/8RiN58M:I7nbUSnexQGQEnZnP/Em58

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
195d0e91a0c80c78f08ec766d91cc5fa_JaffaCakes118

Files

195d0e91a0c80c78f08ec766d91cc5fa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b9d5e1cbb067d2bb83e382d3c16349c9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_onexit
_except_handler3
fwrite
_initterm
strrchr
strstr
sin
fprintf
_exit
__p__commode
malloc
strcmp
fclose
_adjust_fdiv
__setusermatherr
__set_app_type
__getmainargs
__p__environ
strlen
free
exit
_snprintf
_XcptFilter
_acmdln
fopen

user32

GetDesktopWindow

kernel32

GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ