5b8d738fca99523c2c38af33b83ad1f5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b8d738fca99523c2c38af33b83ad1f5_JaffaCakes118
Size

71KB
MD5

5b8d738fca99523c2c38af33b83ad1f5
SHA1

9c3a6011dc927519432684c3f1317a815c4093cc
SHA256

b272e8358c71a3726f1bc57e6b5ca4fa5f15d316865162cecda755fd6e7d34a2
SHA512

3d39617097e9bff6851df0cf58c723fc6b39e94d7e432ebdc9e1d82619276ba3761050d93db8290605cabc51f12a8192f5c321b4c2dd928c869d3cf55e59c5cb
SSDEEP

1536:IH5i3GujkDzNiVOQsTgDMSr/m+Rk4VKIZGol+6ew801smgwDCG/kA:0U3xjk1iMOASTm+C4VKAGoltvd+G8A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b8d738fca99523c2c38af33b83ad1f5_JaffaCakes118

Files

5b8d738fca99523c2c38af33b83ad1f5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0939dcdbadfa76c5b58a57ba06093b29

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3
fwrite
exit
free
__p__commode
__set_app_type
atexit
realloc
sin
_adjust_fdiv
__getmainargs
_initterm
malloc
_exit
fprintf
strcmp
_snprintf
_acmdln
__setusermatherr
_XcptFilter
fclose
_strnicmp
strcpy
signal
fopen
_onexit
strlen

user32

GetDesktopWindow

kernel32

GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE