46ffdf549d153b4f941a9ae2447b6fc9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46ffdf549d153b4f941a9ae2447b6fc9_JaffaCakes118
Size

78KB
MD5

46ffdf549d153b4f941a9ae2447b6fc9
SHA1

1743845f185cf474b7917816e6e2549910ac02d9
SHA256

0499e04eb8a93bd369bab04f189f7bf80d0a100178f28de79b964bb545f5bc04
SHA512

fbdb361fa234de38ca99dcd7d6d602a36db7f50a14ccad4b1466b89ddb8fdabe20a66c755b99115e7304bb90b7b6ea7f89ee80bd7647c0cc07e53a68238fb6f9
SSDEEP

1536:ZqxSa9ha2qEqYyWDbXAc8pRh1WeRtO2hkit5Fp2dYYWV5r7EKSMVNpCKcePKP+W:ZUSa98BE0W4TWctBPp2dYYU5PJSMghe6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46ffdf549d153b4f941a9ae2447b6fc9_JaffaCakes118

Files

46ffdf549d153b4f941a9ae2447b6fc9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a10f7c8ed6ea7bdd4ad4d9ab18602053

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

free
sin
__setusermatherr
fprintf
_XcptFilter
__set_app_type
__p__commode
fflush
_iob
_initterm
_exit
malloc
strlen
__getmainargs
fclose
fwrite
exit
_adjust_fdiv
_acmdln
_onexit
fopen
_except_handler3
strcmp

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ