95e236198d779a6d86fce2dc24e5a569_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95e236198d779a6d86fce2dc24e5a569_JaffaCakes118
Size

74KB
MD5

95e236198d779a6d86fce2dc24e5a569
SHA1

c3b9cfcf803756eb62ec66aa36f5a65a2aecac84
SHA256

5beb56b0cd666bd83ccc8f3c98d73c1bdc89eb87a47c0221a1bba4f57e29ec0f
SHA512

44e9c5873c3c977da383d1628f77ee85dec186292ecc381dd7c18154ee9a9a41eee29290eaf6e1df22c3a9c0a9ed1487c7e643d5e08a6076e6f5771a41b93fe6
SSDEEP

1536:RtiPkn+wOwC7sv2ZIo9Wc8ckhDCQH1UgrXekCdB+8ZMo/YMAXBM6VZ0n:/iPiC7Y6/ScUJmgra+8NYiWZ0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95e236198d779a6d86fce2dc24e5a569_JaffaCakes118

Files

95e236198d779a6d86fce2dc24e5a569_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5c577dabf193a7e2d7c38b5dc087aa19

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

sin
__set_app_type
__setusermatherr
_adjust_fdiv
strlen
fprintf
exit
wcslen
malloc
fopen
_acmdln
__p__commode
__getmainargs
_XcptFilter
fwrite
fclose
memset
free
strcmp
_initterm
_except_handler3
_onexit
_exit
calloc

user32

GetDesktopWindow

kernel32

GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ