d134371c1f4b0a274fd8b5af6c920746_JaffaCakes118 | Triage

Sharing

General

Target

d134371c1f4b0a274fd8b5af6c920746_JaffaCakes118
Size

134KB
MD5

d134371c1f4b0a274fd8b5af6c920746
SHA1

e546954f9c2103939c43fc3827e9ee66f51c3f86
SHA256

1e1a3bc32fbccec5b31f3afde8aa9229617ff9c99cf0a875665e025edc2a44ef
SHA512

2b98a3feb1a26a5e8dfc12a263a551b745f687aec91b52c7fdacfabebd54c7a51fe7413315914c4d60ac3405c4527839339864d54125e28a5f70b6deadec43ef
SSDEEP

3072:6aNt+oilMCxusQof2LFi3oWfdDrWFGl8NSPVG0LWFGlF:6aNtbSlJP3oWfWGWkPU0cG7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d134371c1f4b0a274fd8b5af6c920746_JaffaCakes118

Files

d134371c1f4b0a274fd8b5af6c920746_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c9a9777764d1dee9e21dbf521250ebf7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__fmode
__setusermatherr
fprintf
fopen
strcmp
_onexit
_XcptFilter
_acmdln
_exit
__getmainargs
realloc
free
_errno
fwrite
_except_handler3
strlen
fclose
_initterm
__set_app_type
malloc
_adjust_fdiv
exit
sin
_stricmp
__p__commode

user32

GetDesktopWindow

kernel32

GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qlujuvo
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE