23580082a110b4cb2a2d87892777fbe8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23580082a110b4cb2a2d87892777fbe8_JaffaCakes118
Size

69KB
MD5

23580082a110b4cb2a2d87892777fbe8
SHA1

3eb552c4504b3da280985371b294567855462d09
SHA256

20f33c393cc1bd7caf13567a3ab97a551242f0b8b7120871b7f5c755ecc17676
SHA512

8ed2e4166645f6f87cc74aec0249fee670ce9070cb9af03136dbfe7c8beda3dbe53423ffa0589a1f9727029184f7bcf42aca38e60b4bbf8810ddef52539f486b
SSDEEP

1536:ouVm0364U7kKidkP+gLDmvgr69LmRrjhAV0NtCBJymSk6qAv/G:b7NEkKie+cDmvg6mZjrfCBmkG/G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23580082a110b4cb2a2d87892777fbe8_JaffaCakes118

Files

23580082a110b4cb2a2d87892777fbe8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4e6b5d2e0a6117350ad6e198ef6776d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__getmainargs
fclose
strcmp
exit
_initterm
abort
sin
fwrite
_exit
_acmdln
_vsnprintf
_except_handler3
free
__p__commode
wcslen
_onexit
fopen
fprintf
_XcptFilter
calloc
realloc
_adjust_fdiv
malloc
__set_app_type
strlen
__setusermatherr
_strnicmp

user32

GetDesktopWindow

kernel32

GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ