64cc0ea2dad47646ed8304260e652eeb_JaffaCakes118 | Triage

Sharing

General

Target

64cc0ea2dad47646ed8304260e652eeb_JaffaCakes118
Size

72KB
MD5

64cc0ea2dad47646ed8304260e652eeb
SHA1

dae334cca6c186e23ee33d0f7cf5ba58ad378d44
SHA256

3e31045520f5ffb7806f28495aaf027d0316b51dd18607ae17aa68c6d4ab34c9
SHA512

7996d13425f74aab730db59a28dba03e42958adb28a11606ae41389ed4f9dfb7aeba05f97437f0f4d6b8b3c85c729ab3215e5f087f1c14655e41b4c90822d005
SSDEEP

1536:JoHtKFXA40SYVPta92gzqutKBN6Cg0OUnFQsaTZG4XLbOR9:JoHtwn0CTqutg6CltnlaTJX3Ob

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64cc0ea2dad47646ed8304260e652eeb_JaffaCakes118

Files

64cc0ea2dad47646ed8304260e652eeb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2289633a3be27c2746774b8eabc771dd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_onexit
sin
_errno
__p__fmode
__getmainargs
fclose
fopen
_XcptFilter
malloc
fwrite
_adjust_fdiv
_acmdln
strcmp
_exit
_initterm
__dllonexit
__p__commode
_except_handler3
__set_app_type
__setusermatherr
strlen
fprintf
exit
strncpy
fputs
free
_strnicmp

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ