2c046b6f7a4ff395dab63e85123a6f60_JaffaCakes118 | Triage

Sharing

General

Target

2c046b6f7a4ff395dab63e85123a6f60_JaffaCakes118
Size

156KB
MD5

2c046b6f7a4ff395dab63e85123a6f60
SHA1

651ed448c99df260efb1a1caf663fa55abe40c61
SHA256

2e260f6d9fe5eea95dd1d1d722d6cae828babaae9dc31d76ecdb7a08983e74fb
SHA512

6f6acad8e7fe8ee2a2fbec07e4086024e42c5880c4ea0cb2f93baf497298490e66aa734d49c7001baf3c94537aa640c943ebae9c84c97de085c612afae35e45a
SSDEEP

3072:OeBztYPIQSqVTtfpMlk0zuA9AP+UGXUBxw6dXMIReX9BXlN:Oed2wuVTtqlRqyAP+1EBi6d8H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c046b6f7a4ff395dab63e85123a6f60_JaffaCakes118

Files

2c046b6f7a4ff395dab63e85123a6f60_JaffaCakes118
.exe windows:4 windows x86 arch:x86

68f579ed3797e30b2d2c0d5e9960c620

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
Sleep
LoadLibraryA
MoveFileExA
GetModuleFileNameA
GetExitCodeThread
WaitForSingleObject
CreateThread
GetProcAddress

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE