4327ce559152410a0ca5c22794abcbc5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4327ce559152410a0ca5c22794abcbc5_JaffaCakes118
Size

77KB
MD5

4327ce559152410a0ca5c22794abcbc5
SHA1

43f4e38e68e6a8bc65fa9af1d0c9eb78842bbcad
SHA256

1a072328e5f4662593c080cc483809246031fec15eae353ae5b9944e99bd31b6
SHA512

777821587aee0f7015ff43b4e2ecf0be7a35afb229e6acaa056c8db3621d6d7683dd80d9997fd9b993c0a59a5731ca8a021c85c2baaa0ac8b97b0b9f43267078
SSDEEP

1536:drxn5mluSQdzimhYmzOFc0L4g09P5CUrJP5UW9CCuJ0gw6Jt20acdd1+NwKiA:dr1IluSIzzhYmyF14g09P5xP5UWcCVxp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4327ce559152410a0ca5c22794abcbc5_JaffaCakes118

Files

4327ce559152410a0ca5c22794abcbc5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

73acccface01bfa4981f7661f7e1d0df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

exit
fwrite
fopen
__getmainargs
malloc
_initterm
__setusermatherr
_acmdln
free
strcmp
sin
__p__fmode
_adjust_fdiv
_XcptFilter
_exit
wcslen
__p__commode
fprintf
strlen
__set_app_type
_except_handler3
_onexit
fclose

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE