2c0a3183e38680e114f9e808287d6eb5_JaffaCakes118 | Triage

Sharing

General

Target

2c0a3183e38680e114f9e808287d6eb5_JaffaCakes118
Size

3KB
MD5

2c0a3183e38680e114f9e808287d6eb5
SHA1

1a76297f5101fdffd27f79d68b20fd9de4c10ba3
SHA256

d42379415ae553fdb0a16188610c114c523e1151da5973e73db96184298196a2
SHA512

72860cdd0f3185465b68eecfa869370ca844e8839648981b033e7c5b8a8d017d826707c159c9dea0b4848c337e3ef9ad11ea03cd01cfab93fdc58d2697a4d416

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c0a3183e38680e114f9e808287d6eb5_JaffaCakes118

Files

2c0a3183e38680e114f9e808287d6eb5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ef76055c162e902cfa066514a7028408

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDC

kernel32

CreateThread
ExitProcess
GetAtomNameW
GetLastError
Sleep
WaitForSingleObject

gdi32

EnumFontFamiliesExW

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 326B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ