df255df6e1f5341aea16b7809461abba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df255df6e1f5341aea16b7809461abba_JaffaCakes118
Size

75KB
MD5

df255df6e1f5341aea16b7809461abba
SHA1

061fb1543d8bf55f322182b28c3c6a04c14b29a0
SHA256

1c6a3480a4fc81791bc7086853289fd8afeeb9e38ed0c01e434528fa001e2601
SHA512

adf2323bafe098d75b863c7e57717925be2b6470a1ab5724b09e4df0eb3ba4454a036d87e61fb076eb00e6fa2dad9bb3436c950f61a7ce6b07424c7e39ab2342
SSDEEP

1536:OnIfzGpH7ynWD2fc7kx16o/2JGZRuehdtaZ8dtXfN+:OnIfzGpOnVkoeo2J81tndtX1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df255df6e1f5341aea16b7809461abba_JaffaCakes118

Files

df255df6e1f5341aea16b7809461abba_JaffaCakes118
.exe windows:5 windows x86 arch:x86

98feaee156cf7279292f6058feac2c0e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
sin
fwrite
realloc
fopen
fclose
strncpy
_acmdln
_onexit
_exit
_initterm
strcmp
strlen
fprintf
malloc
exit
memcpy
free
_setmode
_XcptFilter
_adjust_fdiv
__setusermatherr
__getmainargs
_snprintf
__set_app_type
_except_handler3

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ