81dd632119b75c7f07c651a7c79adae2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

81dd632119b75c7f07c651a7c79adae2_JaffaCakes118
Size

82KB
MD5

81dd632119b75c7f07c651a7c79adae2
SHA1

492b3bd5b38f65e2d92e96ede856db8c625ff241
SHA256

60772d521243b550917943f54eca9e057c2675d0c4b06eb38e52d0c97ef4cfa5
SHA512

2309024f6bc0fb7e3936b84bfa90d0cf3025e0ff4a14caee5faf6173f9cd8faf65a3beddf5ebc48b0eaf7e29f0038b2e121ad3762d0a9129406c7800eff8776a
SSDEEP

1536:IykpBeLZrk/x/NuBvK5uL923W+uXnpQCqcftM3Y:IykpBeLZrOA45lGPXnpQCzM3Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81dd632119b75c7f07c651a7c79adae2_JaffaCakes118

Files

81dd632119b75c7f07c651a7c79adae2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fc47f4038a781e1da391526c3f492e04

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strlen
malloc
fwrite
__set_app_type
__p__commode
__setusermatherr
fopen
abort
__getmainargs
strrchr
fclose
_initterm
_vsnprintf
_exit
strcmp
_acmdln
exit
_onexit
free
_except_handler3
sin
fprintf
_adjust_fdiv
_XcptFilter

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ