265429b0dc3796e777128cb13dc8fcdd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

265429b0dc3796e777128cb13dc8fcdd_JaffaCakes118
Size

71KB
MD5

265429b0dc3796e777128cb13dc8fcdd
SHA1

1f8911929f6ac802d5733005a6e6099d4a2ed418
SHA256

33916ce8bb01c044cfb65bd3a02ab81dab19ac8ca463c76a2f51c40f478c9733
SHA512

d8bfbc00effb16b4572bbc6ba89767a29635148a2c8be9a085d5dc170430f29c462c2a5bd1699dc1bc2e8d291eb3a4123adcf802afbc76fec45e423d28f69ad1
SSDEEP

1536:2fh4fg6EK5WKu52hzMlz1n2WtOzPhMs9vRQSBVnP:Fo5rlz12WUTnZQ4P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
265429b0dc3796e777128cb13dc8fcdd_JaffaCakes118

Files

265429b0dc3796e777128cb13dc8fcdd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

585ab09a6ff9df52e47bd6ec36b0ce4e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_acmdln
free
_adjust_fdiv
fclose
signal
__getmainargs
_exit
_XcptFilter
_setmode
strlen
strncpy
_snprintf
__set_app_type
strchr
strcmp
_onexit
fopen
_initterm
malloc
fwrite
strcpy
getenv
__p__commode
__setusermatherr
exit
_except_handler3
fprintf
sin

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ