d3bfc2d2a4ca667f3d7de1e48f7b5b11_JaffaCakes118 | Triage

Sharing

General

Target

d3bfc2d2a4ca667f3d7de1e48f7b5b11_JaffaCakes118
Size

74KB
MD5

d3bfc2d2a4ca667f3d7de1e48f7b5b11
SHA1

7eafb069325ce9118e74deac97e0b606ae78a640
SHA256

bd67753079581b09afb45291f436e158a83fbfb745f8db9da5ae1532623f6227
SHA512

fa5c2ab0804545782c449ac02ee07e7d072049b4461336521de69ed5888a2ff1011f9f5c4f2e93d6e5e91ac1e6ddbad4cb077ead295d763c0833bda371e04b56
SSDEEP

1536:+IYXYsiOfJtjfI9+y5p3oblL2E12L5kj3Qib0jB:wdtTIAy5togkM5kUib0jB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3bfc2d2a4ca667f3d7de1e48f7b5b11_JaffaCakes118

Files

d3bfc2d2a4ca667f3d7de1e48f7b5b11_JaffaCakes118
.exe windows:5 windows x86 arch:x86

85421f37df13fb0439561ee93fa4ba9b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fprintf
_initterm
sin
__setusermatherr
_except_handler3
__p__commode
free
strlen
malloc
__p__fmode
_exit
fwrite
strcmp
strchr
exit
fclose
_adjust_fdiv
__getmainargs
signal
_onexit
_XcptFilter
_acmdln
__set_app_type
fopen

user32

GetDesktopWindow

kernel32

GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ