2b9e2d88c15173ed7eb5e987fd9a7364_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b9e2d88c15173ed7eb5e987fd9a7364_JaffaCakes118
Size

16KB
MD5

2b9e2d88c15173ed7eb5e987fd9a7364
SHA1

294854ffc7aebc65e90fe1b624477b00230ef539
SHA256

d734db1863c3e83f27b8013e70c178474b34f4f59021d876002f1018ffcea88c
SHA512

8956031b369f7b4b6c9b8808e6ab32014a1b2177230b21df1e334ff94605b762431380fca1b539e5f504784c46b4b8652a9c29a076ddde92cdbffb572296f45c
SSDEEP

384:FH0/O2RfE5mvHA3bDJm81z4pjrsUIwBNad0R2+W:2XfE4o3bDk+2j7L4uW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b9e2d88c15173ed7eb5e987fd9a7364_JaffaCakes118

Files

2b9e2d88c15173ed7eb5e987fd9a7364_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f57893fd57fdf1b7807d9d0224ceb675

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strcpy
strcmp
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
strcat
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strlen
__setusermatherr
memset

kernel32

GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE