5ee8f04f26a95112827fe80fcd348bbf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ee8f04f26a95112827fe80fcd348bbf_JaffaCakes118
Size

75KB
MD5

5ee8f04f26a95112827fe80fcd348bbf
SHA1

f46cbe90e7b00de329d4ac2da5a1e9b7dc919614
SHA256

2ea7a507142076c4bdf59fe3e008a77cdc7f6a00073dd300ba8be792c658fc16
SHA512

c7fc268c6048d2f6f1b68ffa44599d6dd455fdb7f113d69e8724f66bc8e8ab117676736b8906dafd4a700eb0e5d2c22b57160a875fde39dc1985bac8a2a74882
SSDEEP

1536:vWv6c1EpxvxkHIIib4+fvdGoJoxSloTEJCXr+UfwjbmB:vWvNRHjGtvooe4GwJCIjbmB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ee8f04f26a95112827fe80fcd348bbf_JaffaCakes118

Files

5ee8f04f26a95112827fe80fcd348bbf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1e061e4360117f0154d97d9b9199d72f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_XcptFilter
__getmainargs
calloc
_exit
_acmdln
exit
strlen
_setmode
free
sin
__set_app_type
fopen
fprintf
_onexit
__p__commode
strcmp
fclose
_initterm
fwrite
_except_handler3
realloc
__setusermatherr
strrchr
getenv
_adjust_fdiv
_cexit
malloc

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ