2c7541d7014532f8d0f401804d4c3869_JaffaCakes118 | Triage

Sharing

General

Target

2c7541d7014532f8d0f401804d4c3869_JaffaCakes118
Size

54KB
MD5

2c7541d7014532f8d0f401804d4c3869
SHA1

1faf264234f39fd67411ff3c92ace97aefdbd3f0
SHA256

f5a92ea7353b4e3f8c66f04229fbac1852fc78b2d0a8339c6d553aa75d90494e
SHA512

ba4353978183253d408a958e03eaef9d8537d53aee1974ce052c95c359493c3374ea75fd190d24faadcc5c42a144c036c7165fe2e5e8ba39f93f1c59eccbd465
SSDEEP

1536:km+CK1w4y0ccSoAGlQ47Xqa8jq0k4c+H68/e0h5LdDF3:kmmwB7oAGlQVePoh5Ld5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c7541d7014532f8d0f401804d4c3869_JaffaCakes118

Files

2c7541d7014532f8d0f401804d4c3869_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3ae4b1c6ff56d757474e6f634ed8a8b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FillConsoleOutputCharacterW
GetStartupInfoW
GetCommModemStatus
FileTimeToDosDateTime
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE