327376353401a0db16e997fd3a64215d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

327376353401a0db16e997fd3a64215d_JaffaCakes118
Size

85KB
MD5

327376353401a0db16e997fd3a64215d
SHA1

2c7c5a0177faa2ee6705ceb75335e447ab89973a
SHA256

6c4a76e0af3db675a1985e3b76b7fea3bda5aa5fc617babf7a1a15c2a1fa9b58
SHA512

f4c922781615be1e51296b24ce320ecdda516ffabd2a2e3b09f1de940bc4fcc2941fec8c784907c50a258e6fe89d6a8f21da778d80856bce7a2a9edbd8468f0b
SSDEEP

1536:W94w8d1B4ybHpQsbaXkwmeVzMFYMKkFH2MDYyHiDgblDx/s4fJt25b2t89nIo2/u:qKXbHVG6eVzDM/WMDYebl5s4fJcq89nP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
327376353401a0db16e997fd3a64215d_JaffaCakes118

Files

327376353401a0db16e997fd3a64215d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0e8dc0102c93a67df0478c6f89196381

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

sin
fopen
strcmp
exit
malloc
fclose
_XcptFilter
__p__commode
fwrite
_exit
fprintf
free
_except_handler3
_onexit
_adjust_fdiv
strlen
_acmdln
__getmainargs
__set_app_type
_initterm
__setusermatherr

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ