2b816e147215ef24422c9d3e442338d2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b816e147215ef24422c9d3e442338d2_JaffaCakes118
Size

36KB
MD5

2b816e147215ef24422c9d3e442338d2
SHA1

edfb17f1d4c200f2dcd7eb0981d2a0ea90e2479e
SHA256

119368ebad75dd9665c2ec3de67303f92b15f6c70cbc4cd913653d32ff2e70ed
SHA512

818fd77a65e187fc10bb8d19a99edfacd431dd38421189cb018854c77e188ec568a5bfb76f7615d434ca054648c0b3fe99406ab43283deb59cbb1b164f7cca5c
SSDEEP

768:85pWCmKqzKeXSFoQ5ZTvr+r/zBah7urqlxOSzm7PO0EixdZ:85pWVKEOTvr+Tlahyrq7OTTO0xxdZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b816e147215ef24422c9d3e442338d2_JaffaCakes118

Files

2b816e147215ef24422c9d3e442338d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6a368c7abc6384cf09e2a2845acb6b97

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
Module32Next
Module32First
CreateToolhelp32Snapshot
GetCurrentProcessId
GetProcAddress
GetModuleHandleA
ReadFile
GetFileSize
CreateFileA
Sleep
ExitProcess
GetModuleFileNameA
CreateThread
CreateMutexA
OpenMutexA
GetStartupInfoA

msvcrt

malloc
_except_handler3
free
realloc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
strstr

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ