6a5d62b2475e0a041ecdb557d5e98fbd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a5d62b2475e0a041ecdb557d5e98fbd_JaffaCakes118
Size

74KB
MD5

6a5d62b2475e0a041ecdb557d5e98fbd
SHA1

c80a5eb5fa1ba4e3267b0a5be28ff462796518a6
SHA256

10ef3a13483a1e46ead7851078b941210b0b09d7607af4e7b7b5a81fea727a0d
SHA512

7e6028ef02628f101d5327ffabab3d00959169d65be6da86d8d7b87b1677655692bc680fc6bdbce0938ab4982335e43fa99384d11d3e0270b8336fa7272c47bb
SSDEEP

1536:lJgvQlIaCDAWhyxAjl0nCc3mkfucO12D8YLd+lUcXxZKG:lcoLC0Whyy053HL82D8YhNcXxIG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a5d62b2475e0a041ecdb557d5e98fbd_JaffaCakes118

Files

6a5d62b2475e0a041ecdb557d5e98fbd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d8927bcc5f448c2061a9e894bd42c917

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fwrite
_adjust_fdiv
fprintf
strstr
free
realloc
__getmainargs
_acmdln
strcmp
_errno
sin
strlen
fopen
fclose
_except_handler3
__p__commode
exit
atoi
__setusermatherr
malloc
_XcptFilter
__set_app_type
_exit
_onexit
_initterm

user32

GetDesktopWindow

kernel32

GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ