b9c29f1367fa4085f61c72ad24fb0c78_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9c29f1367fa4085f61c72ad24fb0c78_JaffaCakes118
Size

83KB
MD5

b9c29f1367fa4085f61c72ad24fb0c78
SHA1

63ee4da9db564cc3968f32e3cf041acfd16d6ef7
SHA256

8e7d064fea24f322a6636b3950afabb41698685d858737d799fbc3ac9d303474
SHA512

a3b7b14d6978955d866c3fb5c435ee92c973d3efbc358479ba64832d457924571a59ee227f2bafb56b410c809bd2d5c5632118cb9a63b1e8c491a4992316d36a
SSDEEP

1536:R2AtXpdUpU5Uu2GNzpevBjKyiGQu6SJog6jLG633HsJ/SyWV2yydkhymG:R5LUpUuu3NpeJjKFGrxJoW6HsJ/hw2yq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9c29f1367fa4085f61c72ad24fb0c78_JaffaCakes118

Files

b9c29f1367fa4085f61c72ad24fb0c78_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8036500c342d43768cee5080d25ca106

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
fclose
__p__environ
free
_acmdln
strrchr
_snprintf
__p__commode
_except_handler3
fopen
strlen
strcmp
fwrite
sin
exit
__set_app_type
_XcptFilter
malloc
_exit
_initterm
_onexit
__getmainargs
__setusermatherr
fprintf

user32

GetDesktopWindow

kernel32

GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ