a4476f3f309c0e5d0d14bb149f4ab640_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4476f3f309c0e5d0d14bb149f4ab640_JaffaCakes118
Size

81KB
MD5

a4476f3f309c0e5d0d14bb149f4ab640
SHA1

15684ba63ef89be48c106d232c9850ab09b68861
SHA256

894abfe721957cd8277889173f24fd367fc3654eaf0501f80e7d9c3a1c51029d
SHA512

02ea0ac9f1ef566868c35f46d87283691ddedc728d21b23242b546f3d7278c7de0f9aa3be1a9dc4672b749bf63a7309ebadd2f9c55061d02d139248dd6465600
SSDEEP

1536:cryQcVui72xW3/U5pau2EcRsfaVgoxEQYPSfepaHThHm2tse:c+QcP72Isl2E2wO3xEQFfyaHtG2tf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4476f3f309c0e5d0d14bb149f4ab640_JaffaCakes118

Files

a4476f3f309c0e5d0d14bb149f4ab640_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1621c95a9e24be3e40f825c6f78a267f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

atoi
_acmdln
fopen
fwrite
_exit
fputc
fprintf
exit
__getmainargs
__setusermatherr
sin
_except_handler3
strcmp
__p__commode
strlen
_initterm
free
_XcptFilter
_onexit
fclose
_adjust_fdiv
__set_app_type
malloc

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ