db0858868a8c481b36c69267bbcab5ab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db0858868a8c481b36c69267bbcab5ab_JaffaCakes118
Size

88KB
MD5

db0858868a8c481b36c69267bbcab5ab
SHA1

9cca308a0f65e32df88dc171592b7f6c3e36a3ec
SHA256

a39a4b5a960622b93f0c9bba786a6bf638c29f233426d9e055467ab641a31771
SHA512

2cfd17957035875092e386263e17a254f2fe1e07585780253874166c641aa3c0cc7a2172a6b44c86558a38440ec25a10707a06469e75ec88edee91c779a5783c
SSDEEP

1536:gJ6nwOHHU/X/FZOJJ1iMkfMP8zGUCVRv9g9AEtO8ZLGq5gVKC7l0uKId:ggTnU/vFZkmMkfFyNTF0fOyiqla0uKo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db0858868a8c481b36c69267bbcab5ab_JaffaCakes118

Files

db0858868a8c481b36c69267bbcab5ab_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6447a820d4fbf61084a5151b7bfa38ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_exit
strlen
fprintf
__set_app_type
free
_initterm
__getmainargs
malloc
_except_handler3
_acmdln
__setusermatherr
calloc
fclose
sin
exit
fopen
_adjust_fdiv
strcmp
_setmode
fwrite
__p__commode
_XcptFilter
_strnicmp
_onexit

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ