2be1597146c83fd36d805ffeec071a27_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2be1597146c83fd36d805ffeec071a27_JaffaCakes118
Size

72KB
MD5

2be1597146c83fd36d805ffeec071a27
SHA1

b9206e8e3e2da65f5aceb4a5ba783cc2fb165f24
SHA256

6243a3f3674a4a5af5cff68786b52312e63d91a7928857c044715f6cdcd535fa
SHA512

a9b80f8910bc186c1864b5f55f75f02790ba823c99304859af96dcc15274e06b95a30f1c9c336e0f353e577e8aeeca8b770c87465949ee51364370b263a138d8
SSDEEP

96:uIfM5+i6ujm25dlK9Ds4rsosNoFpz+XHyHSXrpGY3X2cuEeLVNNoyni9K:ZoD6QKptLgSHApGY35uEeZNNoyniU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2be1597146c83fd36d805ffeec071a27_JaffaCakes118

Files

2be1597146c83fd36d805ffeec071a27_JaffaCakes118
.exe windows:4 windows x86 arch:x86

278068ee2c25b39835c7aa8ea00b3371

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
Sleep
CopyFileA
GetSystemDirectoryA
GetModuleFileNameA
WinExec
GetCurrentProcessId
CreateToolhelp32Snapshot

msvcrt

strlen
_chkesp
sprintf
strcmp
strcat
fclose
fputs
fopen
exit
_exit
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
_stricmp

Sections

.data
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 553B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ