959a0e5a8fe538d5ef0c8833922be775_JaffaCakes118 | Triage

Sharing

General

Target

959a0e5a8fe538d5ef0c8833922be775_JaffaCakes118
Size

86KB
MD5

959a0e5a8fe538d5ef0c8833922be775
SHA1

4315d7dd9e785716a44500033a54026940f59e78
SHA256

c50ed9d4e6c030db656f60bc84a433ef8a64467c0a7f6a244556bd585839722b
SHA512

1f3069aea14d441e3cd255c92133b03d290154f836b0561350a5f4d86f78a924a4e58b668eeceaf19860c223389fd228fb1caa8355a308a9e5d9c5306ad7f325
SSDEEP

1536:71EAvEeZmt92NhAQl7HSgRDhhbNObzGSj8WTT/lP10xNmCCU5VhASg3SRI:71EAvyt92NhAGHSgRkbKxW/MbmhUThVR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
959a0e5a8fe538d5ef0c8833922be775_JaffaCakes118

Files

959a0e5a8fe538d5ef0c8833922be775_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6098407c398d62b63f197a2993aa9cca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strlen
__setusermatherr
fwrite
_onexit
sin
__getmainargs
_exit
_acmdln
strcmp
__set_app_type
printf
_XcptFilter
_initterm
free
fread
fseek
exit
fclose
_except_handler3
_adjust_fdiv
malloc
fopen

kernel32

GetModuleHandleW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ