6a9d57a352bbdc064827b5a3cd71ea9c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a9d57a352bbdc064827b5a3cd71ea9c_JaffaCakes118
Size

75KB
MD5

6a9d57a352bbdc064827b5a3cd71ea9c
SHA1

a1eabde4b43fb30c880955bd0825e8f0b521b228
SHA256

c8ebfea0b902ffd1409655b94fb6ff37387c05e8aab4a53277dd7491e32738db
SHA512

39dab64be4d7aae91d7e3ecb92f5b7a057bc36aded7500df9a16283015c5fa9329b4859868eaa664a01a22554417871d08c215baf57c37dae8f3046786c50e69
SSDEEP

1536:RDraODonEIDEmYxz/NN5odLspeCHQjmBn/4uT0c2Lj1lUk8/X:BOOMnfDEjp/N+symScCj1ek8/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a9d57a352bbdc064827b5a3cd71ea9c_JaffaCakes118

Files

6a9d57a352bbdc064827b5a3cd71ea9c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3769c5d8e9a4fb4ddff559c67241d7fb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
_acmdln
__p__commode
_onexit
exit
_XcptFilter
malloc
sin
fprintf
strchr
strlen
free
fopen
_exit
__getmainargs
fclose
_initterm
strcmp
__set_app_type
_except_handler3
_stricmp
fwrite
_adjust_fdiv

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ