43cadc51b54a2152942d30cc59bc79e9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43cadc51b54a2152942d30cc59bc79e9_JaffaCakes118
Size

85KB
MD5

43cadc51b54a2152942d30cc59bc79e9
SHA1

de678dba1aef95be9b1cd20fd05c65adaea05b07
SHA256

2ca0f44a42b15ebe9c227dad91583d7becb7fbff0773cdcd20d2f759b99e0fe5
SHA512

d2858968dd66afb63ce4a262c7312042f568c9e7a059b21e77f0de3820444c463216cca5548d3ed027de8260109a9b9dccf5b213b1c1b311d5b1070c1ddfcc1f
SSDEEP

1536:oo6SxFJM/dcOSpPiCSKWIGQgFpk394kKZIFZ+me/FvE15NfnmWt45likc4:USx/M/dc7ZWIGsGNOBsc1eWt45Akc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43cadc51b54a2152942d30cc59bc79e9_JaffaCakes118

Files

43cadc51b54a2152942d30cc59bc79e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7e3d10bcfad972ae8b09b11f50bc84a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_initterm
malloc
__set_app_type
strcmp
free
fprintf
_exit
__setusermatherr
_write
fclose
_adjust_fdiv
exit
_onexit
_XcptFilter
__p__commode
sin
_except_handler3
_stricmp
__getmainargs
fopen
_acmdln
fwrite
strlen

user32

GetDesktopWindow

kernel32

GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ