2bf4e1940426b155a40f7c7a9de94196_JaffaCakes118 | Triage

Sharing

General

Target

2bf4e1940426b155a40f7c7a9de94196_JaffaCakes118
Size

22KB
MD5

2bf4e1940426b155a40f7c7a9de94196
SHA1

0f1c4dc84c8afbc557c8fb43f6e304e41c7edb70
SHA256

360e5c8184e9a03f413ca39ba1e86f4dc139db27b9c7b2d42eb0764266d8d58e
SHA512

f61af64d63c4aa123fc23d35cc24fa295e4fff7cdb3ad0a77f9e06c0db31aa06fce61ab3aa2cef49c6d9e7e1c4ab7ed0e41ce788c336a979d9fdeb9bc1014970
SSDEEP

384:ecnE0N9TugdeVfaO+BWVHcufg/1uR07MGLfBGmFRRZYcfH6kLmy:ecnHN9T9eBgWVHcufs8+7zVGa1Y8vLmy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bf4e1940426b155a40f7c7a9de94196_JaffaCakes118

Files

2bf4e1940426b155a40f7c7a9de94196_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f13fa1a1394daf4bb47d46dbdf83dce8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rasapi32

RasEnumConnectionsA

kernel32

GetFileSize
GetLastError
GetModuleFileNameA
GetStartupInfoA
ExitProcess
GetCommandLineA
CloseHandle
SetEndOfFile
WriteFile
SetFilePointer
GetTempPathA
GetProcessHeap
WideCharToMultiByte
GetThreadLocale
SetUnhandledExceptionFilter
GetTimeZoneInformation
GetLocalTime
GetWindowsDirectoryA
GetCurrentProcess
TerminateProcess
lstrlenA
LoadLibraryA
GetProcAddress
GetModuleHandleA
UnhandledExceptionFilter
CreateProcessA
GetSystemDefaultLCID
RtlUnwind

user32

CharNextA

advapi32

RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA

ole32

StringFromCLSID
CoCreateGuid

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ