2b486585efe0b94a2d8b939f416b3be3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b486585efe0b94a2d8b939f416b3be3_JaffaCakes118
Size

25KB
MD5

2b486585efe0b94a2d8b939f416b3be3
SHA1

0888433d1159add5e212c208bd7dd5eab76375c6
SHA256

b3d22308caf79ceab4b0e7d1d11ccb20b8ecdf04213cd80ebfaa950cd9fd1ec1
SHA512

c2917a919ee4957fe41bf72e811a4465dd34a2e77101a2ee2bc6c2a2965219e88623a4fbbb03db2e14273ff7294a6ef4ae7052006ee862b1a15d10c96f44cf27
SSDEEP

768:zpEocmc484xy2C40qgL9lZGZ5isKl4qN:mXfD4PisKldN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b486585efe0b94a2d8b939f416b3be3_JaffaCakes118

Files

2b486585efe0b94a2d8b939f416b3be3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1737fcd2b2331a0f0e85538c665f7990

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
SetUnhandledExceptionFilter

msvcrt

_fileno
_isatty
_pclose
_popen
_stat
_strdup
_cexit
_errno
_fileno
_fmode
_fpreset
_iob
_setmode
__getmainargs
_stricmp
_strnicmp
_wcsicmp
atexit
exit
fclose
ferror
fopen
fprintf
fread
free
fwrite
getc
getenv
__p__environ
malloc
memcmp
memcpy
perror
printf
putchar
realloc
signal
sprintf
strcat
strchr
strcmp
strcpy
strlen
__set_app_type

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 480B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE