2c2ede65b6a94fbb3cfaff86aba83911_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c2ede65b6a94fbb3cfaff86aba83911_JaffaCakes118
Size

1.3MB
MD5

2c2ede65b6a94fbb3cfaff86aba83911
SHA1

59588712570158d447cdf2e175f195958abb3a83
SHA256

7cc023c96d628509ed074cf02643df7a6d95715d5d07a0551aae77b8a242385d
SHA512

583dffb9a27327e456d5a141f9d16f6957e763b0ce2940e5c13b4ed8f0fcb9286b62d2881182e2fe4bea20240aef80d5a92a2b487517d9fd18c10049e6b14e6e
SSDEEP

24576:91XSo3hiKKh+UvP4PxwZUTVyNELWIjkF2akT/iIiGkh36aHDDGVNyfLif2dqwAt2:LAKKPvPmxwZuVeEPje42bGu36Km0if2Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c2ede65b6a94fbb3cfaff86aba83911_JaffaCakes118

Files

2c2ede65b6a94fbb3cfaff86aba83911_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a070ba683d59d9b8a6ab6da936eeb863

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEndOfFile

user32

OpenClipboard

gdi32

SetStretchBltMode

winmm

midiStreamRestart

winspool.drv

ClosePrinter

advapi32

RegCloseKey

shell32

ShellExecuteA

ole32

OleUninitialize

oleaut32

UnRegisterTypeLi

comctl32

ImageList_Destroy

ws2_32

recv

comdlg32

GetFileTitleA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 372KB - Virtual size: 764KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sddata
Size: 960KB - Virtual size: 960KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sddata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ