2bf9ec543ebf3c27fab25e79c1c95d0b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bf9ec543ebf3c27fab25e79c1c95d0b_JaffaCakes118
Size

545KB
MD5

2bf9ec543ebf3c27fab25e79c1c95d0b
SHA1

f54ab0fa178c4144f6777abcc986762dea3e7cb7
SHA256

47ef22090fddc43cb67bc3e6a67146c43ab99512ee1222d5886ab898128c2aac
SHA512

7edbcf762bd3de09e8dce8fbb0d3ac80ff358745f7bc2e66a4ea5f0d32b01227c80feab0989b5b7e06b1f642483cd1b1d237f193adee1933fded024ede6990e8
SSDEEP

12288:6wth4exAXG+/OxP2JtxDBpfiUR5/FyO3ThsUfmlnK05NQg9rAoZ1aqPB6C/tq6fG:6wLxoGN4BRX//FyumK05NQg9rAoZ1aqi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bf9ec543ebf3c27fab25e79c1c95d0b_JaffaCakes118

Files

2bf9ec543ebf3c27fab25e79c1c95d0b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4673cdb0c1227adabcd639b02d5b516b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
fopen
malloc
free
fclose
strlen
exit
__p__iob
fprintf
sprintf
fwrite
fflush
ferror
memcpy
getenv
sscanf

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
FreeLibrary
HeapFree
LoadLibraryA
GetProcAddress
HeapReAlloc
HeapAlloc
GetLogicalDriveStringsA

winmm

mciSendCommandA

Sections

.code
Size: 451KB - Virtual size: 451KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ