2183e573957150073eb0976247f2bdb6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2183e573957150073eb0976247f2bdb6_JaffaCakes118
Size

74KB
MD5

2183e573957150073eb0976247f2bdb6
SHA1

aec212fce34380c53c33387ad52009c80dc934d0
SHA256

848945f47d218afb779c922825863c9c9320fa79bd8e0fbcc23db455678ae959
SHA512

0958185c0fa1f2eea96ceb92f2882891301971f14427860e6e176c8f8ddd9edae0a7a37552bc431066d0726bdbfe985df9a1c608cd27c8eba736852a32e86e36
SSDEEP

1536:749riw8NnhRe1jAoccHvwlDEamJ+xyYViKEfvc3K5pHUrA76:S8Nni1jvBHvwlIv+xyHxvcspHwA76

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2183e573957150073eb0976247f2bdb6_JaffaCakes118

Files

2183e573957150073eb0976247f2bdb6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8cee3d4f45351f761264175f407d8f23

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_setmode
strchr
__setusermatherr
_except_handler3
_XcptFilter
_onexit
exit
_snprintf
__set_app_type
strlen
fprintf
free
sin
_exit
fwrite
malloc
_initterm
_adjust_fdiv
__getmainargs
strcmp
fopen
abort
fclose
_acmdln
__p__commode

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ