6078dbec80a02e5f65437d40dce6d63d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6078dbec80a02e5f65437d40dce6d63d_JaffaCakes118
Size

70KB
MD5

6078dbec80a02e5f65437d40dce6d63d
SHA1

ce082319803115414b75ccfea9ece48e5582ee5d
SHA256

3fd6d38c2e22bcb29779400c7fbcd7c471a3ac529fb3b03e6edf03d15a0f9af0
SHA512

78771d59e4d0e420d0217e20898837ebb608810ba910b8c8074a4b42b9c9898864a4a177af0c62f4a3f715ad4897a9e6a5e07341dd096546117db3671c2265e6
SSDEEP

1536:tUmiWrGgk7TyBkIaxjH6SF2vvXcQ7oit25:tUJWcvyBkbxj1IcQ7Xt25

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6078dbec80a02e5f65437d40dce6d63d_JaffaCakes118

Files

6078dbec80a02e5f65437d40dce6d63d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

95aeb64f1468afb15766d01e5b20f098

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fclose
strlen
_adjust_fdiv
free
__p__commode
_except_handler3
_acmdln
_exit
_write
__set_app_type
exit
fprintf
__getmainargs
fwrite
strcmp
__setusermatherr
_initterm
_onexit
malloc
sin
_XcptFilter
fopen

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ