afa6d1ccf7adc8e67777de1b87e3b3f8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

afa6d1ccf7adc8e67777de1b87e3b3f8_JaffaCakes118
Size

81KB
MD5

afa6d1ccf7adc8e67777de1b87e3b3f8
SHA1

25fd36b8b6043f68c75738665d2fedfd040b22d1
SHA256

2124b2d3a4b92a062c05ef0707a47bba42e53a053b4dd4da7af8bfe5096c9526
SHA512

afc3eeb3266fc315cd89f13b795b868b86750eadd53d8b81d3b0227cbdf0cf0c55ea7bee2e844a9b02f999a43eb4fb0a6c5c6d5c95957f19c9bf6fc04d54b187
SSDEEP

1536:OYDIXN2sNRkM9O3Rr3NJcCOqutJvBhPvkDCqHNIFXqk996PZ9:fD4NDkD3NPOqcBhPvkDFNIVqkH6PZ9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
afa6d1ccf7adc8e67777de1b87e3b3f8_JaffaCakes118

Files

afa6d1ccf7adc8e67777de1b87e3b3f8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

054d984c29b5afc3fd015d63f233ae9d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fputc
__p__commode
fwrite
_onexit
fprintf
malloc
strlen
free
_except_handler3
strcmp
__set_app_type
_acmdln
_initterm
_adjust_fdiv
_exit
fclose
_strnicmp
exit
_XcptFilter
fopen
sin
__setusermatherr
__getmainargs

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ