571fa313904b704e06970675b3155290_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

571fa313904b704e06970675b3155290_JaffaCakes118
Size

79KB
MD5

571fa313904b704e06970675b3155290
SHA1

19963edb9e98eb2e21f0eb34827525186172b470
SHA256

f506cea7dc87a0f64c59a3115637920dc3a21856096869cde53208d6335935a0
SHA512

e9cf289e01ddbb7546adb99f60de5edf05917cc21d2f252de73b190dc56dd16478248f85863580b11270ce7178d5956bb0f1ff33e903acd1a458937672718346
SSDEEP

1536:4AjCHdgcdLQMNYBAGhXTSBbAdQSplofkz4VCZcm1yyZbmSY:rC9JCMNYBAHBboX3ofk0VgyWbmS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
571fa313904b704e06970675b3155290_JaffaCakes118

Files

571fa313904b704e06970675b3155290_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5f31cc3581a4742870033e3318d0c132

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
malloc
strncpy
free
_exit
__getmainargs
_iob
fopen
_onexit
_adjust_fdiv
_acmdln
__dllonexit
fwrite
strrchr
_initterm
_XcptFilter
strlen
__p__commode
_write
exit
__setusermatherr
sin
fprintf
_except_handler3
abort
strcmp
fclose

user32

GetDesktopWindow

kernel32

GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ