d15dab30164497f1837412e8941005ab_JaffaCakes118 | Triage

Sharing

General

Target

d15dab30164497f1837412e8941005ab_JaffaCakes118
Size

75KB
MD5

d15dab30164497f1837412e8941005ab
SHA1

4ccac2607131600a5716a660ad7e76422d956a61
SHA256

76bf6402498974e8c2d47d96b53876d47be432cfeae6cd88c5ff9cff11735d14
SHA512

a00bfb2197de492c7871f383c1f20e95452512b2c60bf67ff14705cc504ec64e6402f8ffd85e4709a647d73eb6852f0ff88096c6969b137f2c7502d0b6a7b2a9
SSDEEP

1536:62XPd2QPjz05bGNZb1ocSb6/JZBH37POJKWC9skv:d12Q7zlNd1ocSb6//V37mJKKkv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d15dab30164497f1837412e8941005ab_JaffaCakes118

Files

d15dab30164497f1837412e8941005ab_JaffaCakes118
.exe windows:5 windows x86 arch:x86

39d8dab8d6f9dc73605e87e40e2ed669

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3
_XcptFilter
fwrite
strcmp
fprintf
strlen
_initterm
strrchr
_adjust_fdiv
sin
malloc
__setusermatherr
exit
_onexit
free
_acmdln
fclose
_exit
__p__commode
fopen
calloc
__set_app_type
__getmainargs
sprintf

user32

GetDesktopWindow

kernel32

GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ