f71469ec9c4cadd935e436495ee2083a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f71469ec9c4cadd935e436495ee2083a_JaffaCakes118
Size

77KB
MD5

f71469ec9c4cadd935e436495ee2083a
SHA1

8dac76a4c1876671bb559763dc995e1efa6d6d75
SHA256

67c79f03cf0bd65f479234172f50c4c27cf9aeda4c79dab71205b5ee3ec0a084
SHA512

e500c553e71de4e49fd3ff8dd6f6e11b514bb7133048f4d64fd456673d55e081ac7d92917dee3f1ba74963816825e6317184285ea716bbdea6c71ecb4f06ae8c
SSDEEP

1536:CxRFrqQs+ZjjZQDu2hNlZqMYn11afEPTpUP5DbgO4xYvNXzd:ezZ3ZQ/hNGMfDcrSXz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f71469ec9c4cadd935e436495ee2083a_JaffaCakes118

Files

f71469ec9c4cadd935e436495ee2083a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

64729ae3dde64ad8100516e47a41a851

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fopen
fclose
getenv
_write
_acmdln
_initterm
_XcptFilter
_exit
strcmp
fputc
__p__commode
free
malloc
_onexit
_except_handler3
__getmainargs
sin
strlen
fwrite
fprintf
__set_app_type
__setusermatherr
_adjust_fdiv
exit

user32

GetDesktopWindow

kernel32

GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ