41d650a28a5632e3ccb0873953b6ea6f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41d650a28a5632e3ccb0873953b6ea6f_JaffaCakes118
Size

74KB
MD5

41d650a28a5632e3ccb0873953b6ea6f
SHA1

d8501473bcfae88434ae0c591e50e293b4acea5e
SHA256

9c2d305059e2e12722ff676aef25122880fcd0c35728e7cf16d8ec29ba08f8ed
SHA512

18a22d21052dbb9f0590dea5c70c38553618e821d36a3018541910759a2460ca2d102adc044e510f7ad94f26bb42abedc2a6f966354473a3eac96f9deb397f95
SSDEEP

1536:W2DVKoj/tG2/XBwt2xdZSfaU8vXS8ydIHwSPC/f5992YCSrSXUiwE:W6koDtvqUxsaU8vXDUIHwwAxHF2UiwE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41d650a28a5632e3ccb0873953b6ea6f_JaffaCakes118

Files

41d650a28a5632e3ccb0873953b6ea6f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6056e1f2fbb30a06cf778d56c3f8f7fb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fopen
strcpy
fprintf
atoi
__getmainargs
malloc
exit
_adjust_fdiv
__set_app_type
getenv
_strnicmp
_acmdln
strchr
__p__commode
_except_handler3
strlen
_exit
fwrite
strcmp
fclose
_XcptFilter
strstr
__setusermatherr
sin
_onexit
free
_initterm
memcpy

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ