49be8040bd118aa283c3b08f5aac1aeb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49be8040bd118aa283c3b08f5aac1aeb_JaffaCakes118
Size

87KB
MD5

49be8040bd118aa283c3b08f5aac1aeb
SHA1

687edd3843ed66062deafc8fe8252c67ca407ac6
SHA256

9a143fdeb138ce3471adf407a0c46b43cb5ec8cf2f4a4eb7b65de18cec8336c9
SHA512

7ecdf48eb439737e10955bd67ddfe7d4285e38bd27c3cca950588ac1f5326ec11e19170fa76a1aa83ebd28fafde80b9207e96b5bd93cd904a3cd8aca6eca1eb8
SSDEEP

1536:jFwKAO8IaIbT1jLcpnECv+dzuzTyoQ8MuiglHlNfHqInfHFbfZ:jFwQ8Lkd38niglvPqInNbZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49be8040bd118aa283c3b08f5aac1aeb_JaffaCakes118

Files

49be8040bd118aa283c3b08f5aac1aeb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1b6a4419255d1564cf34c4f8d3166a62

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
malloc
_acmdln
strcmp
strlen
_adjust_fdiv
_onexit
sin
_except_handler3
__p__commode
_XcptFilter
_setmode
exit
__set_app_type
fputs
fclose
getenv
_exit
fopen
atexit
__getmainargs
_initterm
fprintf
free
fwrite

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ