6937ddcaae00cb960ed4422be0a0da8a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6937ddcaae00cb960ed4422be0a0da8a_JaffaCakes118
Size

84KB
MD5

6937ddcaae00cb960ed4422be0a0da8a
SHA1

721a14fd8b6791ebbc09c86149116f2e0008fe9a
SHA256

a26e3f192b0630c4879b2985687147033894ffc7580c0f6ad5d6a7d58db87429
SHA512

ded1bce954ac4cc74843ca43fe4973c68c088b5e09aeb2fcabf0a8b40078756f61470e575f9c89f3ea997f01477ed66c197f85d13c5ef404658ee463c1eeac8d
SSDEEP

1536:V9FJKBmtjSpx7PMvbfeJP1mX+yshBb6f8CUwBqvkkaIggD6DGPWI:rjKu2DhP1mXzsRCUuqchOW8WI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6937ddcaae00cb960ed4422be0a0da8a_JaffaCakes118

Files

6937ddcaae00cb960ed4422be0a0da8a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4afabadedcc630c261f0362e79ed9285

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_onexit
_stricmp
strlen
fclose
_XcptFilter
wcslen
signal
calloc
fopen
_initterm
free
fprintf
__setusermatherr
__getmainargs
malloc
__set_app_type
_exit
sprintf
_adjust_fdiv
_except_handler3
sin
fwrite
__p__commode
_setmode
strcmp
exit
_acmdln

user32

GetDesktopWindow

kernel32

GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ