2c2e26bd97b6b614eb789b4cf660cbe5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c2e26bd97b6b614eb789b4cf660cbe5_JaffaCakes118
Size

150KB
MD5

2c2e26bd97b6b614eb789b4cf660cbe5
SHA1

57f8c4baf3913569465992c22a06d442c2973b70
SHA256

4bcb6d7a3dfcd18d3a240a6a3ae4691a46e22937fdd486d9544e039a4c2fd830
SHA512

8566988c2a7c34c0f9d59be3c8ce4af277e89b551460168828480ba63e4223198f0d207d24d273c278cbec056292774546f69d8738acd0f3e40d43f2819ef992
SSDEEP

3072:SQB+mqgCMRhdrKdgB5zCH6sevKtn+9mP/IemEbe4kkD72zQIER:SQ3rwo5zpsevKF8mPgWeMufER

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c2e26bd97b6b614eb789b4cf660cbe5_JaffaCakes118

Files

2c2e26bd97b6b614eb789b4cf660cbe5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6f32f86f5bc50d933f885fe3ad644482

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_controlfp
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_except_handler3
_exit

kernel32

FreeLibraryAndExitThread
BeginUpdateResourceA
SleepEx
GetStartupInfoA
VirtualFree
GetModuleHandleA

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ