44d5e5b3932bb157513ca62fdad205fb_JaffaCakes118 | Triage

Sharing

General

Target

44d5e5b3932bb157513ca62fdad205fb_JaffaCakes118
Size

78KB
MD5

44d5e5b3932bb157513ca62fdad205fb
SHA1

2718bd4aa365a02477658be448667d07c986c296
SHA256

164eee9af3d8b55cdb9b5913c067fc46712c4b3d670ba0cc8eacfd8c32287f9e
SHA512

71787f89e382868fcb2cdeae67d5fcfd85d6808e8568a52751ccc09e557fdba81f8d5563df314ae385fa628003d7013d09b2b6658c8346c27f296da762b5f36a
SSDEEP

1536:RuDFueM3LUdTFqVZcSA5ByGQbqua+73Pj2+dUSRRWq:QQbUdT0BA58Jmua2S+dJRRWq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44d5e5b3932bb157513ca62fdad205fb_JaffaCakes118

Files

44d5e5b3932bb157513ca62fdad205fb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ca7231d9ce58c42cb3a318a33499f350

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_snprintf
__set_app_type
__getmainargs
strcmp
_XcptFilter
_onexit
malloc
fopen
__setusermatherr
sin
_exit
_acmdln
_adjust_fdiv
_cexit
fwrite
exit
_except_handler3
fclose
fprintf
realloc
__p__commode
strlen
free
__p__environ
_initterm

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ