2ae9bbcd1c1e3ef9470a16d29374a691_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ae9bbcd1c1e3ef9470a16d29374a691_JaffaCakes118
Size

140KB
MD5

2ae9bbcd1c1e3ef9470a16d29374a691
SHA1

966756af2be90fd8a63cf6432d8dc14c7d157403
SHA256

23383203ae6fa60d1fea102626dc6690d64141ebd5ff6167b4cafdfdc8a0ce7b
SHA512

94015f416e92d3a0a35a9b09e7048d1b90acd8a20e2c7bd68e0fca70fd561fe41396a85af2252ecbd76d07277ea825004a402d4a0d57c73095015d6d3c1f465b
SSDEEP

3072:Q0jZGamIjWmqbnhXm28xgYv2I5c2wK7AjGh:XGfnhXmP7sja

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ae9bbcd1c1e3ef9470a16d29374a691_JaffaCakes118

Files

2ae9bbcd1c1e3ef9470a16d29374a691_JaffaCakes118
.exe windows:1 windows x86 arch:x86

e9dc5a28a1d12f9e39ad4b22cb619338

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MapViewOfFile
GetFileTime
SetLastError
GetCommandLineA
CloseHandle
HeapCreate
GetVersion
HeapAlloc
GetModuleHandleW
InitializeCriticalSection
GetStartupInfoA
TerminateProcess
GetModuleHandleA
FlushFileBuffers
SetFilePointer

msvcrt

__getmainargs
exit
_isctype
_acmdln
_initterm
_setjmp3
_XcptFilter
_ftime64
_cexit
__setusermatherr
freopen
_atodbl
_controlfp
_except_handler3
memcpy
__p__fmode
mktime
asin
_exit
__set_app_type
__p__commode
system
_wfindfirst
_adjust_fdiv
_cwprintf

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 85B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ