7537710a0e1ef7ade3475b4550a4f649_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7537710a0e1ef7ade3475b4550a4f649_JaffaCakes118
Size

73KB
MD5

7537710a0e1ef7ade3475b4550a4f649
SHA1

ef52b13d3ad94dff0ff5923efcbad686c05a9cdf
SHA256

27e9cf79229e1eb5259da8fe813921c3ae52e83e74f5a8309ca078a6ffa4a224
SHA512

3a129ce091f72c00b339d7ac79b4ad37c97c3d6e67b9675c7e8735662d9b6ddee7c135311274e788c028dc978d6494dc0344d731842dadac0810db9afc711ce8
SSDEEP

1536:02HeEVzncHmI8pR+J1ArSY9/nt7RYLlW/PXQt3y:J982q2SY9/7YLI/PAt3y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7537710a0e1ef7ade3475b4550a4f649_JaffaCakes118

Files

7537710a0e1ef7ade3475b4550a4f649_JaffaCakes118
.exe windows:5 windows x86 arch:x86

dbbfb395668662ad8bfb11e257def07d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strlen
malloc
_acmdln
__p__environ
fprintf
fopen
__getmainargs
fputc
_adjust_fdiv
memmove
_except_handler3
_XcptFilter
__setusermatherr
_onexit
fclose
exit
getenv
__p__commode
free
strcmp
_initterm
__set_app_type
fwrite
_exit
_errno
sin

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ