2b347be41e8d8da2ad112aba261f6995_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b347be41e8d8da2ad112aba261f6995_JaffaCakes118
Size

70KB
MD5

2b347be41e8d8da2ad112aba261f6995
SHA1

5631c3b9c1d54c3a546aaf95ad4ef0d689293e84
SHA256

069ef7ddd9fe1b6950a5c04edc522859354b9074f1d8e3fad1da8f175f5477a9
SHA512

c2af3dc424e91b0564d232d1058e6678e3beca41d71d27b7e94cc2440560c03185ab92963922502ba5c15371c9d108f8cfcda352b6cdd91ad41b0497e94e1c8c
SSDEEP

1536:R+PxbE8cF2h3p3Yca7OL8y6UApWKmXxdWOo6CLvjs8wBj2rjs:nOL8aApnbOo6EwBj2c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b347be41e8d8da2ad112aba261f6995_JaffaCakes118

Files

2b347be41e8d8da2ad112aba261f6995_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d374eca4063bba27342a1c6e325316be

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_exit
__p__fmode
__set_app_type
_except_handler3
_controlfp
srand
rand
??2@YAPAXI@Z
??3@YAXPAX@Z
malloc
free
__p__commode
memcpy

kernel32

CreateThread
GetModuleHandleA
LoadLibraryA
GetProcAddress
GetTickCount
WaitForSingleObject
GetStartupInfoA

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 892B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ