a151437db4b03fef5a0c3d1c303bf822_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a151437db4b03fef5a0c3d1c303bf822_JaffaCakes118
Size

75KB
MD5

a151437db4b03fef5a0c3d1c303bf822
SHA1

2128f33cae007d68d4b07690ed611b85edeccca6
SHA256

d563b079067ba139029746b6e083600f96e846ec7a59b557d3d5074963377885
SHA512

bc4e167594e876d3225470c88d7554031624176eed70c73e9f63101f7d177a50911b54f83d208be0e79169b0c9723d0a7d88a989375f8342b96118e53e7a20ae
SSDEEP

1536:MiCnwKejLA/XuFrzzI+oyS0ni+oaM551+pwK2CViTstESxaUblnH:MiCnwKeKXud3ILy9ni+tgKaK2Ehttxaq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a151437db4b03fef5a0c3d1c303bf822_JaffaCakes118

Files

a151437db4b03fef5a0c3d1c303bf822_JaffaCakes118
.exe windows:5 windows x86 arch:x86

17fa4737f8935dfcbbbd60c2aa6f8d69

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

signal
memmove
_acmdln
fopen
_except_handler3
strlen
exit
__set_app_type
malloc
free
fprintf
fclose
__p__commode
__getmainargs
strcmp
_initterm
__setusermatherr
_XcptFilter
_adjust_fdiv
calloc
_onexit
fwrite
sin
_exit

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ