2c455fb57ae0318e01cb377af0956ec3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c455fb57ae0318e01cb377af0956ec3_JaffaCakes118
Size

208KB
MD5

2c455fb57ae0318e01cb377af0956ec3
SHA1

aa09b7e38e9fbf8eca9c8814122d0c97178f25bc
SHA256

bf25d8022b3e93f5762a5f6fc89551e6ac77b067200de20ced1c5df0771cbec3
SHA512

90a2ae62e4aaf9622cd8bb74a23febc362da749d0e6652eb9e14db4ac985daf65c846786e776a37a85b1ff53e69f704c95dbdaa80ac63594e5b4d53d37d34c88
SSDEEP

3072:JXGaVf8s6k6tVFbDxVX5/Ael3yaGKYMa7m57a0pC:JXGad56zFDC0yaRE7A2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c455fb57ae0318e01cb377af0956ec3_JaffaCakes118

Files

2c455fb57ae0318e01cb377af0956ec3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1872d09f33cb96df619fcaea44c37945

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcAddress
GetModuleHandleA
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleFileNameA
GetStartupInfoA

msvcrt

__CxxFrameHandler
_exit
_XcptFilter
exit
memset
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_acmdln

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE