8af5a98b4343f5e951b6479ca04803d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8af5a98b4343f5e951b6479ca04803d0_JaffaCakes118
Size

69KB
MD5

8af5a98b4343f5e951b6479ca04803d0
SHA1

f7316d9852265d0e8746f5e6ec3eaec21968fc6c
SHA256

b58f7d8a566444a33a950b547757148487a503d3007df81f10ca10ca2c467b57
SHA512

3fa768b1ea7d38b223eeb2599ebc1f35efef38ab9784e27c2a0c62be9e17e00a034fce978b2298761cf2ed776ed6d3c2ed0c24b7267e562601dd2d342cf0ad08
SSDEEP

1536:pX3gbZBWEvh7b3dyll5VgtJOBh90N4bYv7KupvU71we8Op:qTtR5y7VgtehKNx7KAM71wPm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8af5a98b4343f5e951b6479ca04803d0_JaffaCakes118

Files

8af5a98b4343f5e951b6479ca04803d0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dedf9d7b16e90e2014038bc1d99ddd19

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
free
fopen
__set_app_type
__p__commode
__getmainargs
strrchr
strcmp
malloc
_except_handler3
__setusermatherr
abort
_XcptFilter
fwrite
strncmp
_initterm
exit
_onexit
fclose
atexit
strlen
memset
_acmdln
sin
fprintf
_exit
fflush

user32

GetDesktopWindow

kernel32

GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ