40d219f6b9715a64270f3e1fcdeeda6c_JaffaCakes118 | Triage

Sharing

General

Target

40d219f6b9715a64270f3e1fcdeeda6c_JaffaCakes118
Size

94KB
MD5

40d219f6b9715a64270f3e1fcdeeda6c
SHA1

8790a25fed3940bb475abc0170782f7f8bdec3e9
SHA256

e364b6db45cad34e516a81567279eb4dab0a67cf99f28512de7e39891aef54e3
SHA512

f0ddd0845e36c080f471b981d94c4e2bfcdf039a80c121136ea99edac1c067444b811d85215caefd795dd5dabefdd51da1a72b0147fa3250ec99181ef1c1ee43
SSDEEP

1536:iE9wQTCHXecGVSHEhDHyaVMzPnNcMMlrhCl+wNQ+ysNdIgONir6KjHll5Ibl53G:jCHNGVSHE8a+Dn/C9CJNQHsN5OpKv5g5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40d219f6b9715a64270f3e1fcdeeda6c_JaffaCakes118

Files

40d219f6b9715a64270f3e1fcdeeda6c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3a8eefaac07c2b3cae3d201b47865ae3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fwrite
fopen
_XcptFilter
strlen
exit
printf
__getmainargs
sin
_exit
__setusermatherr
_except_handler3
_acmdln
fclose
_adjust_fdiv
fread
strcmp
fseek
free
_onexit
__set_app_type
_initterm
malloc

kernel32

GetModuleHandleW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ