49aec4caefa02a0b5b6a9ecabc4691b3_JaffaCakes118 | Triage

Sharing

General

Target

49aec4caefa02a0b5b6a9ecabc4691b3_JaffaCakes118
Size

74KB
MD5

49aec4caefa02a0b5b6a9ecabc4691b3
SHA1

66b1a80f40338100c72c9a42c52f3eb2c715218a
SHA256

f0948f704041fa342cfbe5e9b5653205d0bba9ae83e40c301e807021cf61fd91
SHA512

79058f6976b3dcea21001f6cbc717934c531233d622d26d30ed92191f4efffd93f94946be6733b972330a87ecf314be869b0b0e4dbad463a0deeaba64cf5e267
SSDEEP

1536:S57UPOLg33/4RfcVCGcW3Z4yIUaemK2NMzajAom9Kwwopw91yIhY:S57UPh3ARfcV+yI2mK5NtKwwoUrq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49aec4caefa02a0b5b6a9ecabc4691b3_JaffaCakes118

Files

49aec4caefa02a0b5b6a9ecabc4691b3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0ab030f496d92e31c9c630d62ad20f32

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_acmdln
malloc
fwrite
fprintf
_onexit
_XcptFilter
__p__commode
fopen
_adjust_fdiv
_exit
sin
free
strlen
strcmp
_except_handler3
__set_app_type
__setusermatherr
__getmainargs
_initterm
fclose
signal
exit

user32

GetDesktopWindow

kernel32

GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ