8b61b585df148b7450755f288bbc3f2b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b61b585df148b7450755f288bbc3f2b_JaffaCakes118
Size

79KB
MD5

8b61b585df148b7450755f288bbc3f2b
SHA1

91cacbbf8c2bb8288e3d3e57447f64650e91ed76
SHA256

3e71c2697a0de266b91cabc883475ecdbec73a0519ace4f09d041814b82ec673
SHA512

4c9a8a0bd9ae36701c190e787fe3c354c50e949178267a9a1a1e7e558c907a69cc7423e7e7f37f47537209dda533b324ec088b41599a6be72153d85ee347edac
SSDEEP

1536:BE5szrJc/GZRxHpFy3k+n3A8AA8IC/+01X4pzOBS6ln85wAq0a7m:25J/IR8A8en+jzOgInQqp6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b61b585df148b7450755f288bbc3f2b_JaffaCakes118

Files

8b61b585df148b7450755f288bbc3f2b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ade744af3097d2e54f6f247de28ced85

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

sin
_onexit
_initterm
fwrite
fclose
__dllonexit
strcmp
_except_handler3
__setusermatherr
_adjust_fdiv
free
__p__commode
_errno
_acmdln
_XcptFilter
fputc
exit
__set_app_type
strlen
fprintf
_exit
strchr
__getmainargs
fopen
malloc

user32

GetDesktopWindow

kernel32

GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ