3eb16e46506bd31909463f6a9095118f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3eb16e46506bd31909463f6a9095118f_JaffaCakes118
Size

81KB
MD5

3eb16e46506bd31909463f6a9095118f
SHA1

02352d343afd25fc86a5f535694e8ad09714bf76
SHA256

589b3fb48fe5b526f3c87335a6c9593fe65f13d243216aafc79ba86a4edbab6e
SHA512

6497c848b1d2c1e212340d7fc2df382cd084facc779f7f2d452711a5c260486caadd84c9fff484a811a0e1c40ae7b671d77dad46a593636ec41f41354dee35c4
SSDEEP

1536:8Uf9Hnxw6UVczgdQln0Ac700gyPZUeYNqoi1wRbrNCxNmWh3m2L2:8uUAAQlnU005ZkEoi+30NmW5m2y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3eb16e46506bd31909463f6a9095118f_JaffaCakes118

Files

3eb16e46506bd31909463f6a9095118f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9051823b8681fbd0d6ac5efc767d0f3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fopen
_XcptFilter
fputs
malloc
__getmainargs
_snprintf
__p__commode
strncpy
fwrite
atexit
__set_app_type
strlen
fclose
__setusermatherr
sin
__p__fmode
_acmdln
exit
free
_exit
_initterm
_except_handler3
strcmp
strncmp
_adjust_fdiv
_onexit
fprintf

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ