2c97f75ad662ea6447a69a79cf837dbf_JaffaCakes118 | Triage

Sharing

General

Target

2c97f75ad662ea6447a69a79cf837dbf_JaffaCakes118
Size

104KB
MD5

2c97f75ad662ea6447a69a79cf837dbf
SHA1

770c6e379a44448a99c56ea3497afc1b34820fd3
SHA256

f6b54c68cc680b7fc0cfb2f2a81c24267d89d811cb081d836fc97b3c90e6f39c
SHA512

b7b865127c50fc5c8ea05a9b16f2de21dcfffaef5865faa70db5aa82b2ac28b646bf0653650a4d9cec9512fe53119f697db62cbfd00511d09bb7d9d98052c1dc
SSDEEP

3072:BWAqnwH4OKSbUu+ZnfUTcLyQfbs+yH3O9w6z/9S4:BWBnwH/K8Uu+hMTQyQfb/yH3Yfz/9N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c97f75ad662ea6447a69a79cf837dbf_JaffaCakes118

Files

2c97f75ad662ea6447a69a79cf837dbf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7f8079631fa7ef59f673efc090a68071

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
IsBadCodePtr
DefineDosDeviceA
GetSystemDirectoryA
GetFullPathNameA
FlushInstructionCache
MultiByteToWideChar
ExitProcess
GetStartupInfoA

Sections

CODE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pack329
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE