2ab667aa65e1cde195c87170379d8f30_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ab667aa65e1cde195c87170379d8f30_JaffaCakes118
Size

436KB
MD5

2ab667aa65e1cde195c87170379d8f30
SHA1

6c4d3d3e7e0289105a05f605fc86d6f07459fff2
SHA256

4f0aff610a1bc33b38dec102ce16e8700fc3bf4c2c3ff2e1b3507d34fe759dde
SHA512

ae1f15a5daad1896bf9c459b246c72d4bff80e0338cff5d0bad7559a6419d836a367ddb503deb6da50e8316297ae2d5f5ed93c3f74b78de21e73910d1b7c50db
SSDEEP

6144:8J8726zQM+DbZ4Atc8fWxRjLY3u38fo+4M0:mnvZksWxae3H+4M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ab667aa65e1cde195c87170379d8f30_JaffaCakes118

Files

2ab667aa65e1cde195c87170379d8f30_JaffaCakes118
.exe windows:4 windows x86 arch:x86

75fd63e54e7dbecc213d249b82a91afa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
exit
longjmp
_exit
_acmdln
_XcptFilter
sprintf

kernel32

GetProcAddress
GetStartupInfoA
FreeLibrary
GetSystemTime
GetModuleFileNameA
GetModuleHandleA
GetEnvironmentVariableA
InterlockedExchange
Sleep
LoadLibraryA
GetCommandLineA
GetLastError
GetComputerNameA

user32

CharUpperA
MessageBoxA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
GetUserNameA

Exports

Exports

_mFdllinfo

Sections

.text
Size: 408KB - Virtual size: 405KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ