b820daa94a4c04898280f77a19f2212b_JaffaCakes118 | Triage

Sharing

General

Target

b820daa94a4c04898280f77a19f2212b_JaffaCakes118
Size

181KB
MD5

b820daa94a4c04898280f77a19f2212b
SHA1

d8b0042bfdd42d41a78767eb0fd54d49fd54c0dd
SHA256

a4b7c5087e9a0f966c87436c475fe8d3f375fe793920fb054acdf1f8fd18af19
SHA512

c3fb55665ecab676e1de3de7ad01d33a736d3b01cb3edfc511f904034a893a4c6dc6c3eda3d7b384e0e5554ed42a1444932170242a85c6232270ef9d96a2fa8c
SSDEEP

3072:yZG/0A12yvqWIjCLmdvyHpzs4pGRtjUL5f2F/dFL1bWkjoVr4dQeWV93mr6:M4SyUjQcIzs4qC1c/d//joVrs/WV9Wr6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b820daa94a4c04898280f77a19f2212b_JaffaCakes118

Files

b820daa94a4c04898280f77a19f2212b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

50ade7e5aa4675057958dde888a4688c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_XcptFilter
_adjust_fdiv
sin
strlen
free
fclose
__getmainargs
_exit
_acmdln
__dllonexit
malloc
fputc
exit
_onexit
__set_app_type
fopen
fprintf
fwrite
strcmp
__p__commode
__setusermatherr
_initterm
_except_handler3

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ