3bdf2d57638750365c08da6afbb15e16_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3bdf2d57638750365c08da6afbb15e16_JaffaCakes118
Size

81KB
MD5

3bdf2d57638750365c08da6afbb15e16
SHA1

1d95093d9e572ae08f9afd19d1902b672061255a
SHA256

310485896b064e218aae40068ea9ff1db0c15de7eede61887c60d9d504abf05f
SHA512

6c4d39e7c97fb9d7b24a0af9da8077abd30f8cdd3c3d554124cbd7d637bee40e74c3d4c4a86df9cff8c2d9d4cc734c62c2a32b337c3d6c3a8953cc2ee1e10bc0
SSDEEP

1536:EpK/fGdme59e0HzkTLl/Kf2iygZW/SfsXKUiliWmdEshCnlmtL7PY:Mxje0HGLMRZW/4sdigW3VnlmtL7PY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bdf2d57638750365c08da6afbb15e16_JaffaCakes118

Files

3bdf2d57638750365c08da6afbb15e16_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1823032e402b5665072bbc317b82e3a1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
__setusermatherr
fclose
__getmainargs
fopen
_onexit
fprintf
_exit
sin
_initterm
_strnicmp
malloc
fwrite
strcmp
free
strlen
__p__commode
fread
exit
_acmdln
memcpy
_except_handler3
_XcptFilter
_adjust_fdiv

user32

GetDesktopWindow

kernel32

GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ