cef0fb1bfd95678513816afb044f3ff4_JaffaCakes118 | Triage

Sharing

General

Target

cef0fb1bfd95678513816afb044f3ff4_JaffaCakes118
Size

84KB
MD5

cef0fb1bfd95678513816afb044f3ff4
SHA1

3b8d2f134cf1635d36bc4d9556c89b741811a86c
SHA256

5a7731a7391c9dbdf1d6cf0e01e24feb31ff386193ad71e5c5645872b1f71a31
SHA512

bd119c8c159dfcb6120bda2e6feb4a7061d986cd511518f3f14bd54574c837e5c4816b868206344af3df3714aacfdf81b09a43b7492f51f917dc8f079c8a2b08
SSDEEP

1536:jUewdzQRvRH1H/WcwRQISA7KOQS53o81tH5mJmlTP0QCuQcZHmOOM8Mm4:TIQh91lfwKOQLgtH5mJmxPUuQcsOt8Mr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cef0fb1bfd95678513816afb044f3ff4_JaffaCakes118

Files

cef0fb1bfd95678513816afb044f3ff4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

00385210f8fb4882b2d21c5bf4480225

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_exit
strncpy
sin
fwrite
_XcptFilter
fputs
free
_acmdln
calloc
_onexit
_except_handler3
__getmainargs
_adjust_fdiv
_snprintf
fclose
strlen
malloc
_initterm
fopen
exit
strcmp
__p__commode
_errno
__set_app_type
memcpy
__setusermatherr
fprintf

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ