b0ab0308c845f73e286a4ee39fae5786_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0ab0308c845f73e286a4ee39fae5786_JaffaCakes118
Size

72KB
MD5

b0ab0308c845f73e286a4ee39fae5786
SHA1

9c885d6fcf40a8681032594417502d640363cb9b
SHA256

852944b03941ba212a1d97a0f5136c34f94b9f8ebfb68a59edf5c57cede1ab4f
SHA512

57b78b7fb2238a7f1a0377f9fd3ce4008cd1eaf2ebd1770616f946f426bd1b1a7d2e4f7252776e9aec8f3de4da1b713f34bf3580497e72fbcb24d7b08bb18352
SSDEEP

1536:44gAxKUgKWjeOd9sfhF4fZzzjKkM52UePIm3NSF1dU/7QmM7:pUZjezAzzjK/IUjm37QR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0ab0308c845f73e286a4ee39fae5786_JaffaCakes118

Files

b0ab0308c845f73e286a4ee39fae5786_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2ad02f640bab8a09496064a07f70993c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fopen
free
_XcptFilter
_acmdln
sin
_onexit
_exit
fprintf
__p__commode
__getmainargs
strlen
_except_handler3
_adjust_fdiv
_initterm
__setusermatherr
__set_app_type
__dllonexit
strcmp
strncmp
fclose
fwrite
exit
malloc

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ