5dd4a035b5a9669b7006ae868a33e1d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5dd4a035b5a9669b7006ae868a33e1d0_JaffaCakes118
Size

77KB
MD5

5dd4a035b5a9669b7006ae868a33e1d0
SHA1

92a150a86bc8d614967101f596af066293bd4fa4
SHA256

8e1f43b8c0ca752626dfeb90638372341a200ab97efc63c83ce21f1b14d26f3c
SHA512

b4c4c4601c0534a09125099bcacc0614708cb044df84166d51b0f2f643b9a7756799bbc663d48cf0095e0bcfd188efcf04eb4a9c3566992778a5be567968f197
SSDEEP

1536:LAUxv3S0r5BueQN2uFAsulg1QVBxqstEs7sYyp0btJ:cUxvSMq+sud7FHyebt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5dd4a035b5a9669b7006ae868a33e1d0_JaffaCakes118

Files

5dd4a035b5a9669b7006ae868a33e1d0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

20ee7ec95aac5934440a3d3197ee6d23

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
fopen
strlen
_acmdln
sin
_onexit
__set_app_type
strcmp
free
_exit
wcslen
fclose
__setusermatherr
malloc
__getmainargs
_initterm
_XcptFilter
exit
_adjust_fdiv
fprintf
_except_handler3
fwrite

user32

GetDesktopWindow

kernel32

GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ