aee6ed5bce4ea553ea82909849db7394_JaffaCakes118 | Triage

Sharing

General

Target

aee6ed5bce4ea553ea82909849db7394_JaffaCakes118
Size

72KB
MD5

aee6ed5bce4ea553ea82909849db7394
SHA1

ee4045620053ee84bb303fa4838752efb7048909
SHA256

4f96925fd17d71db482c7faf50b8654d190a2f6d4a2e27c4c6b54e6ed06a47d5
SHA512

34d9da0251dc831dae0bddae9b57ffe6421dd0ccb88518047ea25e404949ccfe57b611c285be833908936317c3fe4193124bc2a0ce69908afa3e2c1eb767c418
SSDEEP

1536:2j31HKd5ZWTBgANUyX4GtLSZ+S4QA1QSHpGe9:kNQZWtH2GtLSZz4QZSJGe9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aee6ed5bce4ea553ea82909849db7394_JaffaCakes118

Files

aee6ed5bce4ea553ea82909849db7394_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b866bacf02f8026c1dd3027a0486bd75

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__fmode
__setusermatherr
malloc
__p__commode
_acmdln
strcmp
fopen
__getmainargs
exit
_onexit
sin
_initterm
free
fwrite
fprintf
fclose
__set_app_type
_adjust_fdiv
strlen
_except_handler3
_XcptFilter
_exit

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ