4007f986e8b1762bbbee29958621730d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4007f986e8b1762bbbee29958621730d_JaffaCakes118
Size

80KB
MD5

4007f986e8b1762bbbee29958621730d
SHA1

0aaf92bfbfff93210367faa3c9dbc9207d7674a6
SHA256

675ca9ac4b0a757f8de18f18c7df2e31b69afed43d4fc4361a6a732de158a702
SHA512

b37c28e8083fbff387254c8fafcc22721f9578832dd1becd1618070e77f3f82ee89b63253614a473f317a3db45ffd1b133a57732f0f4e123e32d992105f43718
SSDEEP

1536:c21Zq1hhCwcf69Rnl2Yb+XxL32oaDodlR89gTHuGEmf5MKGB0pVj:11ZChU6LncYb+XlJaDGRAg9xfpV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4007f986e8b1762bbbee29958621730d_JaffaCakes118

Files

4007f986e8b1762bbbee29958621730d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

227e237d8977584df5eaacde075d805c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fclose
__getmainargs
_onexit
strlen
__setusermatherr
strcmp
strncpy
malloc
_XcptFilter
_exit
fopen
free
_write
fwrite
fprintf
realloc
__p__commode
_initterm
__set_app_type
_adjust_fdiv
_acmdln
exit
sin
_except_handler3

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ