e18d7c2d30a6aac7ba8f304b44b8a57b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e18d7c2d30a6aac7ba8f304b44b8a57b_JaffaCakes118
Size

74KB
MD5

e18d7c2d30a6aac7ba8f304b44b8a57b
SHA1

a47a640de2ef5804ea9a410f386cfe3260c45dd1
SHA256

bb3c95e77b2b440414dcf544f06c076e562f7253de0e00f0cde4af73dd8141cc
SHA512

3a4fa0884b9bfc4be0fe807cf8c47285fb828c272614414b2000072c1018b9ac33409280f077757c3b50d27345a3369ea9fb60630f9dcaba67577e5073e404c7
SSDEEP

1536:06YJSKPuXJDe49P3lUiU0z8Jy6Cl7mHxopQ6ktGPjyrswsO9Y:06YJSkERvPVUiU0QJHiCIQ6kI7w79

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e18d7c2d30a6aac7ba8f304b44b8a57b_JaffaCakes118

Files

e18d7c2d30a6aac7ba8f304b44b8a57b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

920d2132610844580485b4b4fc44128e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
sin
strcmp
fopen
strlen
_XcptFilter
strstr
_initterm
free
atoi
malloc
exit
fwrite
fprintf
__getmainargs
__p__commode
fread
_exit
fclose
_stricmp
_acmdln
_except_handler3
__set_app_type
_onexit
memcpy
memmove
_adjust_fdiv

user32

GetDesktopWindow

kernel32

GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE