fba364b4670cf25fee7f476431de1cfb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fba364b4670cf25fee7f476431de1cfb_JaffaCakes118
Size

76KB
MD5

fba364b4670cf25fee7f476431de1cfb
SHA1

e2098f23acbba4c80f779ee35b7a03d4d79d2f04
SHA256

4af2d729676accb06a0eca129a8db9b2328b039642a656b4a3d34fb4be6e9795
SHA512

5965f74b0d6f48a01c17007f8fe9a705b3aa95bc9d2a8a08199c3a1f9ea38b907b23f4cec1baaa15ebdd445599e150fb592394ad3b19277e538ac53745b0cb8e
SSDEEP

1536:cNO0Y/j9mnGS/IZI4JFnjXbLtSsVnwVEr+9Px0M8:cDYRaGq8FjrwVErcPx0M8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fba364b4670cf25fee7f476431de1cfb_JaffaCakes118

Files

fba364b4670cf25fee7f476431de1cfb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

25c5e6ede101bb8819d690cf2ad4616e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fopen
realloc
_XcptFilter
fprintf
_adjust_fdiv
fwrite
strcmp
strncpy
__getmainargs
sin
_acmdln
memcpy
wcslen
__setusermatherr
strstr
_onexit
free
fclose
_initterm
strlen
_setmode
_exit
_except_handler3
malloc
exit
__set_app_type
__p__commode

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ