ac2498f1c0bb850358b5d056501fc7ab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac2498f1c0bb850358b5d056501fc7ab_JaffaCakes118
Size

75KB
MD5

ac2498f1c0bb850358b5d056501fc7ab
SHA1

d4240af57853d4d9777c3dab4c443b0bcf5a3be5
SHA256

ae63bad2b0fde0979d0da4248cfb3ebc9a3e6ba24428d85a27060f41b74da256
SHA512

c1aaf9a8151caa7e843b21f0f6e7bc8c1fdf27cb8d0e06a2b54b00f9fbb5bcfc608cdd83c5ea64409f75f0ca97a971d6731f8521bb8949a488c85fd68a3c090d
SSDEEP

1536:A91LD3oNusTmjYBGBNnycrYFoeqs6sRKC0eudvEFj3k+cUvSt1:A5ausTmjY8ccMqWRJTuRK+UvSt1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac2498f1c0bb850358b5d056501fc7ab_JaffaCakes118

Files

ac2498f1c0bb850358b5d056501fc7ab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

873a61b7e37150fa1754b1d95cd78a3d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3
__set_app_type
wcslen
free
fprintf
strncmp
sprintf
_acmdln
fopen
_snprintf
fwrite
malloc
getenv
__p__commode
__getmainargs
exit
fclose
__setusermatherr
sin
_initterm
_onexit
_XcptFilter
atexit
_adjust_fdiv
strcmp
strlen
_exit

user32

GetDesktopWindow

kernel32

GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ