b7236f7c49b38374c34ace35ebd019d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7236f7c49b38374c34ace35ebd019d0_JaffaCakes118
Size

75KB
MD5

b7236f7c49b38374c34ace35ebd019d0
SHA1

19ebaa71a7e1a07a50b888cc108e75257ec87b2d
SHA256

1b20bde4648ebafc48ba31422a1c628f6a11f788f6a6b5131cfc75ede408e5c9
SHA512

d843d991a8abe11a7c079f8adf6761dee5d12a358347f039e3e7f23ac3ec37be51a30c277de8801be3f09f27e99c52ad8994c6f2a2b9fc2231a8a08e77c9e948
SSDEEP

1536:4SnVs2xkphqLwAcUgdUoQ3UtZkVLVDAPAbpowo+w:4gVXxcaXxg6omUtOV22iwoT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7236f7c49b38374c34ace35ebd019d0_JaffaCakes118

Files

b7236f7c49b38374c34ace35ebd019d0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ef98a9f61a420129d65d8cbce443b92e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
fclose
__setusermatherr
_snprintf
_onexit
_exit
exit
fprintf
free
_acmdln
strcmp
fwrite
_adjust_fdiv
__getmainargs
sin
abort
_strnicmp
fopen
_initterm
__p__commode
_XcptFilter
strstr
getenv
__set_app_type
malloc
strlen
_except_handler3

user32

GetDesktopWindow

kernel32

GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ