d546df1b8649bc28ba78bf586fab5abe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d546df1b8649bc28ba78bf586fab5abe_JaffaCakes118
Size

225KB
MD5

d546df1b8649bc28ba78bf586fab5abe
SHA1

c840573b1ec59fd51756de03023d39321426bd96
SHA256

7cd1cd5f587f51920315e5797a1d51e31a0bf3eca1f270313f72e4a236d4741f
SHA512

fbce56da895c4cca9606bc1ae741712ae1f4a0ba8cfc8871ca129f8c1c86d96a9b4c1809a61b450c8b8bbd450a9ae927eae6c4f154fb64b922d91fe96306a509
SSDEEP

6144:i7RaIlara5OIgDnqG873UIUW7MmMn3873UIUW7MmMnE:ilae9OJDV8AIH7ZMn38AIH7ZMnE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d546df1b8649bc28ba78bf586fab5abe_JaffaCakes118

Files

d546df1b8649bc28ba78bf586fab5abe_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b53834b1a35b0d5122e9b81cbc4a8197

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fwrite
fopen
strrchr
_XcptFilter
free
strlen
abort
__set_app_type
malloc
_adjust_fdiv
_onexit
sin
fclose
_exit
_acmdln
_initterm
_except_handler3
fprintf
fread
exit
__getmainargs
strcmp
__p__commode
__setusermatherr

user32

GetDesktopWindow

kernel32

GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ