2c5fc18928ccfc6a3efd6db0c14cf3f0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c5fc18928ccfc6a3efd6db0c14cf3f0_JaffaCakes118
Size

71KB
MD5

2c5fc18928ccfc6a3efd6db0c14cf3f0
SHA1

c0100570cdba0c30d725a33870969a0250f9ed66
SHA256

5e2a630a0935d403c055a423d02c8fae287cfb3ac4cf67500085c263419747e9
SHA512

454d0a640e94ebca78da05ad88eaf26ab7eb9bdcb9f1d91b315cfadd2b143b55f38b084d7aa8f0add33fea405d01638c975c5fbf6159841341c4d9219e62b273
SSDEEP

1536:RaKNCQ6kZftLV+mk8CyDmQrB9dWLefaHYHZ0E:RFNf6kZfa/ZSBHe9HYH2E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c5fc18928ccfc6a3efd6db0c14cf3f0_JaffaCakes118

Files

2c5fc18928ccfc6a3efd6db0c14cf3f0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8e8c07b69820d2c6a7c74886deac867f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strcmp
fclose
strncmp
_XcptFilter
sin
_acmdln
__set_app_type
__setusermatherr
__getmainargs
strlen
__p__commode
_initterm
exit
_except_handler3
malloc
free
_exit
strstr
_onexit
_adjust_fdiv
fopen
fprintf
fwrite

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ