2ddc320f9b9e1302696166e8372072ba_JaffaCakes118 | Triage

Sharing

General

Target

2ddc320f9b9e1302696166e8372072ba_JaffaCakes118
Size

33KB
MD5

2ddc320f9b9e1302696166e8372072ba
SHA1

608a68cca630df9e869250b7040b9bc584097b04
SHA256

30a4f7b8679a66f5d7a5f4b67cf5babeeebed09b64b81a6a46dabc4f412facf8
SHA512

c7e6e8c9f3beaaf3d82fd016194aaa3cdff8c8ece26d47cb5fac3087d33262ae00b9e9af148002eb62f70257c100c3fe15478f035da60bb50482725a1bbd9925
SSDEEP

768:Ty6HrznDFc0pR6g7KO6R776yLliNuBdpXw9zRYV8:TykC0eCK92AiNuBde9NA8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ddc320f9b9e1302696166e8372072ba_JaffaCakes118

Files

2ddc320f9b9e1302696166e8372072ba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

055647e7e547eecc18483d79643d0d26

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeA
SetUnhandledExceptionFilter
lstrcmpA
GetStartupInfoA
CloseHandle
GetFileTime
FindResourceA
GetUserDefaultLCID
GetModuleHandleA

msvcrt

_splitpath
bsearch
strtol
wcsrchr
_wsplitpath
memcmp
strncmp

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ