ac23d0d8e57ac2c02d3499621d37e68a_JaffaCakes118 | Triage

Sharing

General

Target

ac23d0d8e57ac2c02d3499621d37e68a_JaffaCakes118
Size

105KB
MD5

ac23d0d8e57ac2c02d3499621d37e68a
SHA1

95968b242f64381635b5f63db9c5defe4b280636
SHA256

eb46dbfafc93283157370f91b56b2451d57b55c5eca9dbf38cdb95480646f248
SHA512

076494c2819d1fa433dfa7d90250ea10a34f0423de7f8f94d468f203e9454ef497803fc71881d97016e4318d4f7b3d1a92e7f34c5725dcd7d0fdcba6cc970aac
SSDEEP

3072:kevgYCvDcy9w/bfMRjmPOyAQu/hQf6VukI6tlcs10Ii:SYCvUMBKOy4uf6lrVi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac23d0d8e57ac2c02d3499621d37e68a_JaffaCakes118

Files

ac23d0d8e57ac2c02d3499621d37e68a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b817b3af7b0cb274e664f0ba30d499d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_iob
_acmdln
fopen
_XcptFilter
free
__getmainargs
__setusermatherr
_except_handler3
sin
_initterm
_adjust_fdiv
__p__commode
__set_app_type
strcmp
__dllonexit
wcslen
strrchr
fclose
memset
exit
_exit
fprintf
_onexit
strlen
malloc
_setmode
fwrite
__p__environ

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE