81c01d6bf1965fe392853770bb660624_JaffaCakes118 | Triage

Sharing

General

Target

81c01d6bf1965fe392853770bb660624_JaffaCakes118
Size

70KB
MD5

81c01d6bf1965fe392853770bb660624
SHA1

4a3e6011e976710108a3644302565e0497a2c91b
SHA256

728dbbe365988256e584b0ae08c52bb4ae479378fc5f621463737d4e0645a247
SHA512

992eebe7052ddbe699bebf314059896afda1b6d07017251b5554062cf653719f810ceb60c8e3f1ea49f1edc3654cf9ce181ed46e2546d292a79a234878606e04
SSDEEP

1536:8tOfZGsbJn7/rP06B8u9k2vHg3VaKCAUf4HC0NuI0Ef6RH32ttySU7Id:8+tnDrs6B8u9kKcLnUf4i0NuzEfuiUq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81c01d6bf1965fe392853770bb660624_JaffaCakes118

Files

81c01d6bf1965fe392853770bb660624_JaffaCakes118
.exe windows:5 windows x86 arch:x86

76fa1fb2920d80d117587c11c1172230

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_acmdln
malloc
_adjust_fdiv
strcmp
exit
free
_exit
__p__environ
strlen
__setusermatherr
__p__commode
_onexit
fprintf
_initterm
fwrite
getenv
fclose
_except_handler3
fopen
_XcptFilter
__getmainargs
signal
sin
__set_app_type

user32

GetDesktopWindow

kernel32

GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ