74937d5179d719418e0556dcb5548880_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74937d5179d719418e0556dcb5548880_JaffaCakes118
Size

71KB
MD5

74937d5179d719418e0556dcb5548880
SHA1

1b7ac96fe37fa6190313f3009e72b3a36de7656b
SHA256

439139db2cfb40ca68b2c043821d73d9f7fe3428fc88712c93beab455a7b81dc
SHA512

0377ed72734963aea64c87ca20251856b76d35ce56e584ae34682e74d8513270019a2b47966868ce946c06fcbbd312cddc6651c0a115a9a7658193d0ee06cd53
SSDEEP

1536:/9MENyVhpv7jmTTiQCSD5xfe1YFiQa6hhQJhxWb0:1MENyHATBRiuhYxWb0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74937d5179d719418e0556dcb5548880_JaffaCakes118

Files

74937d5179d719418e0556dcb5548880_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b5547388d721e11e868243c14bc9ebf0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_initterm
fclose
_acmdln
_adjust_fdiv
__set_app_type
sin
_onexit
_XcptFilter
__p__commode
_except_handler3
__getmainargs
fwrite
strlen
fprintf
__setusermatherr
_stricmp
malloc
free
exit
strcmp
_exit
fopen

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ