eba98305a365dee30aee7e010ba5fd5c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eba98305a365dee30aee7e010ba5fd5c_JaffaCakes118
Size

82KB
MD5

eba98305a365dee30aee7e010ba5fd5c
SHA1

e36768db6ee9249f7ea8ec47b825f59d84b46a15
SHA256

4133bdd632c0a29aa1b01935de17d026f771cf6cc4db0f9afa96680346235ee9
SHA512

cd395e1547ebd607326bd422e70eeb91a256506874d76e8b223db296f72dd01c418d88a42724e32c735dd20c543b72d15883fd074fafe79b5f56f4e6e15a8087
SSDEEP

1536:Fq1soTwbJrTM3TMEXEejwa0aBimFOKZ9nC7G/wAgun0qFU9r3Ct+aqM8Hu5:boTwOlXEsL/FOKZ9CqQu0qErSt58Hu5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eba98305a365dee30aee7e010ba5fd5c_JaffaCakes118

Files

eba98305a365dee30aee7e010ba5fd5c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bda21eda4e1d9c9ce0703c4301d67762

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fwrite
strchr
__setusermatherr
strncpy
_adjust_fdiv
fopen
__set_app_type
fprintf
_acmdln
exit
fread
sin
strlen
_onexit
free
fputs
strstr
_except_handler3
__p__commode
_initterm
_write
__getmainargs
malloc
strcmp
fclose
_exit
_XcptFilter

user32

GetDesktopWindow

kernel32

GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ