ea778ed4c56f2dc7cce2b7969e80b11a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea778ed4c56f2dc7cce2b7969e80b11a_JaffaCakes118
Size

75KB
MD5

ea778ed4c56f2dc7cce2b7969e80b11a
SHA1

5f102dc3f6b8ddbc0de43ea8cc05c1b021b9e11e
SHA256

c40d859fd4a178759a30975624aa2708ef48ceab2dc7f9e8c6e5f2095949044f
SHA512

94cec0f75d6e1d53e8a185596c2113cde0962c659782b899114246023b8846f5d61015c71f3f5b41d3d2498a2dd05461fd2a94606befd0dda9e6ec75ed9c3248
SSDEEP

1536:8VK8xtdy14k3sndTFQrYsPERWdLjxf2LNIql+ccVHuXDNXf2FJN9/h:8VK8rdy14k3sArfoW3+7+ccVHuZvaJNP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea778ed4c56f2dc7cce2b7969e80b11a_JaffaCakes118

Files

ea778ed4c56f2dc7cce2b7969e80b11a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

29b7e8d6ab4a47cd6d4830b61cc55e5a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fopen
sin
fclose
__p__commode
__setusermatherr
strrchr
_acmdln
_XcptFilter
free
malloc
fprintf
__getmainargs
memcpy
_exit
__set_app_type
strcmp
exit
_except_handler3
fputc
fwrite
_onexit
_initterm
strlen
_adjust_fdiv

user32

GetDesktopWindow

kernel32

GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ