48faf7ab3435a3d85329d4ae67d61ea3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48faf7ab3435a3d85329d4ae67d61ea3_JaffaCakes118
Size

74KB
MD5

48faf7ab3435a3d85329d4ae67d61ea3
SHA1

84a07afec83b1497a6d4ba4e203429b64aa672e5
SHA256

d66ff69e79a76b3ae87c38704860869eee8e04c482cf16dcc9388d15687cab47
SHA512

9d9d1b52f59bab840875d7003ed0a62bd8b505024b51c947ec8cd4012bae211977322dedbc121953f420a27da30781c33da5a88904777b6a6782a120e6a2ea4c
SSDEEP

1536:OsvzI99qkkdvItb9SUoeVQdPVn4NMZQDXa+NikNT6j7zMRwdG+:O+vRItYUnQdNXgaivSzMRwA+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48faf7ab3435a3d85329d4ae67d61ea3_JaffaCakes118

Files

48faf7ab3435a3d85329d4ae67d61ea3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

320adf139ce2d27921352c952a382315

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fprintf
__getmainargs
fopen
strrchr
exit
__p__commode
_adjust_fdiv
__setusermatherr
fputs
_exit
free
strlen
fclose
_XcptFilter
malloc
_except_handler3
fwrite
_acmdln
sin
_onexit
_initterm
strcmp
__set_app_type

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ