03782a6024092bb6fe73588c1d47eee4_JaffaCakes118 | Triage

Sharing

General

Target

03782a6024092bb6fe73588c1d47eee4_JaffaCakes118
Size

83KB
MD5

03782a6024092bb6fe73588c1d47eee4
SHA1

e57f1345cbb5a1b7bcac4b450c980e8e52036808
SHA256

84f7170927dc6de52d4b876af2a9fe4fd64f488f723dc6d4d0e48f411579e679
SHA512

945e9be7a867e68a8fa46168684badc9615bd51f0881f11adec0c9af1dbd2b8303063416e6470a47c6d8a7ed3a91c8f0b1573283380e4535d61f7267f2ee7bdf
SSDEEP

1536:jsHYJt0ejlsZgL/nMSp/cnn1hPJrQFRv1dy9dBxrv5tRLHxxEs15grokHtuQzQjz:o4J7u0MJnfJsF11dyb37Dzxf5Hjp8qp1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03782a6024092bb6fe73588c1d47eee4_JaffaCakes118

Files

03782a6024092bb6fe73588c1d47eee4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5ac2fdf867dac43b843fdc72aec90c9c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

sin
exit
_onexit
_adjust_fdiv
__setusermatherr
strcmp
__set_app_type
malloc
__getmainargs
atexit
fprintf
strlen
_initterm
_XcptFilter
free
__p__commode
fwrite
_exit
fclose
_except_handler3
fopen
_acmdln

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE