5ee4650a8cf999a68f4a7e0de335499a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ee4650a8cf999a68f4a7e0de335499a_JaffaCakes118
Size

82KB
MD5

5ee4650a8cf999a68f4a7e0de335499a
SHA1

911efa67f083198380c449e9b06556c8ccd89733
SHA256

3f0d854868c3db2e0cbe9ca06940350981ff148c89367b5caed15bb6e8054aeb
SHA512

e2c030e8e7eafd0db3d4096ead9c54703a436d5dae43073c5fb41c83795b5ae2c3bc09ade1c0ab86fb22b716e226ef2d587c5582638caaa3a36cb337c6ff0724
SSDEEP

1536:WpcVNoXy9ZM1VMWdVAN3ErY56IVeUi4zD+QVqJIBHlHjf:WpcgCPM1JygIVeUC5JI7Hjf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ee4650a8cf999a68f4a7e0de335499a_JaffaCakes118

Files

5ee4650a8cf999a68f4a7e0de335499a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c7ad6eaf5feb74b2af5b506d5b2f74a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fwrite
_XcptFilter
_except_handler3
exit
__p__environ
strcmp
_adjust_fdiv
sin
_acmdln
_strnicmp
malloc
_onexit
__getmainargs
fclose
_initterm
__setusermatherr
fprintf
strlen
__set_app_type
abort
_exit
__p__commode
strchr
free
fopen

user32

GetDesktopWindow

kernel32

GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ