22973dcd26a1c682dc5e0a326c9e68e4_JaffaCakes118 | Triage

Sharing

General

Target

22973dcd26a1c682dc5e0a326c9e68e4_JaffaCakes118
Size

84KB
MD5

22973dcd26a1c682dc5e0a326c9e68e4
SHA1

5da00b2ca7d918ae4cdc3a66c0d9bc4c31bd8bb1
SHA256

6aa0ebf849def40e09cdb236deee7a0d583d4aa12368ea151f873fc602e73f4e
SHA512

b925fc60cb654cde32b60937865df42a11145fa3dd9ba48766da287e88ca5da1692693edbf75696a4f9a6fea6fc6dd9737be1cbedbaf87dde837a270c34c71a7
SSDEEP

1536:OurAjD8eOvSZcIy8Se1gjsSdqlqeZMKnCz/WXajO3mVZPoFgdytKDi49:OurAjQp6ZccSe1As6IqefnyWKjWsZuo3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22973dcd26a1c682dc5e0a326c9e68e4_JaffaCakes118

Files

22973dcd26a1c682dc5e0a326c9e68e4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8c36ff2e94ce5d3411f04ac5183b61ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

sin
__p__commode
fprintf
fclose
_onexit
_acmdln
__getmainargs
exit
getenv
_exit
fopen
_XcptFilter
__setusermatherr
__set_app_type
_adjust_fdiv
memset
malloc
_except_handler3
strlen
_stricmp
free
fwrite
strcmp
_initterm

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ