e24125353131d90c7d6207fe47dd5e94_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e24125353131d90c7d6207fe47dd5e94_JaffaCakes118
Size

82KB
MD5

e24125353131d90c7d6207fe47dd5e94
SHA1

ed9228cc26a46f82be0349bcfa7cd67b1ff7321b
SHA256

549412ecd773e59bcb248f5a1a630f1103ec20f494a7b382aa0049115f7f54de
SHA512

547977f5535b72f4aa33a22c921546bc303ea028fcf3437099e3d7da7ef4967f75818613248245032b723f47de994294d4fca6bd21d02aa3eacf7024c2e9eff7
SSDEEP

1536:4S2Rr6HLX5bQWgx69gI9ZkQSHNTB2R8qAjiJFVmYQEPkCtVzCEyvRM3PV:4S2R6WWH9gIlSHNl2evjkFVrQEPTVz5f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e24125353131d90c7d6207fe47dd5e94_JaffaCakes118

Files

e24125353131d90c7d6207fe47dd5e94_JaffaCakes118
.exe windows:5 windows x86 arch:x86

783aaf2cbebbc70e58f6248ff83bb628

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__dllonexit
fread
_adjust_fdiv
_onexit
_exit
fopen
__set_app_type
_vsnprintf
__setusermatherr
fputs
realloc
strlen
malloc
fclose
_initterm
__p__commode
__getmainargs
free
_acmdln
strncmp
fprintf
fputc
sin
_XcptFilter
fwrite
_except_handler3
strcmp
calloc
exit

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE