2a1a2ffaa126cfde70e5ab228ae0283b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a1a2ffaa126cfde70e5ab228ae0283b_JaffaCakes118
Size

62KB
MD5

2a1a2ffaa126cfde70e5ab228ae0283b
SHA1

173372442a738929fbf162f49632771534bb81a5
SHA256

1572dd49422561818e98bdeee33caf5c6f27c4297312816afc8744da30da5e23
SHA512

25d5a0d2dc536eed134071d78eaa0b318709e1cd19f953df281b08a10906b5b094c4802a0e22fa0845700123b603af5c021ae726f4fdb4caf8f3f2980d93737a
SSDEEP

1536:ZpGFZqv9x2Pm3yedXy2Y8O1nWRpPiks+eacO:ZmZoWmi2k8O1WRtiX+v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a1a2ffaa126cfde70e5ab228ae0283b_JaffaCakes118

Files

2a1a2ffaa126cfde70e5ab228ae0283b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0850485dcd8f2597295920690b782d88

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
__p__fmode
__set_app_type
_adjust_fdiv
_controlfp
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_except_handler3
_exit

kernel32

GetModuleHandleA
SetProcessShutdownParameters
BeginUpdateResourceA
FlushFileBuffers
GetSystemDirectoryA
FindNextChangeNotification
GetStartupInfoA

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ