4970cd15b2ce9d0b0a617758e50601be_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4970cd15b2ce9d0b0a617758e50601be_JaffaCakes118
Size

87KB
MD5

4970cd15b2ce9d0b0a617758e50601be
SHA1

2ae946b0819b05791c9675b112dcecdc0a8954bf
SHA256

d813cb3b55509803eb6c45abac3c744456371c1932cd6e5fb48a946b1e91b968
SHA512

b93505119d87cb7c0fe19c9b383c911f723c9981ae6feabe87b7ce59dcd64c41ad84b9a54f784a75ff3aca039dba8da2f6f5e41f3e732ee7af711d4b9d41cd96
SSDEEP

1536:V8gfkPPxu9dmlOzuR7ChsCtQm8GUp2EHNTRkSF1evxk19L5TQ0wPq2x4gq:VnfkP0YlOzuREdSYUp2EtSS2pk1dOq2e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4970cd15b2ce9d0b0a617758e50601be_JaffaCakes118

Files

4970cd15b2ce9d0b0a617758e50601be_JaffaCakes118
.exe windows:4 windows x86 arch:x86

56ad954562caa72cc18470bfc479102c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
sin
malloc
strlen
signal
strcmp
fopen
fflush
__p__commode
free
abort
__set_app_type
fwrite
fclose
_except_handler3
_acmdln
__getmainargs
exit
_exit
__setusermatherr
_XcptFilter
_initterm
fprintf
_onexit

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE