2c81a88d21443a8ed8adcb6f8739aee7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c81a88d21443a8ed8adcb6f8739aee7_JaffaCakes118
Size

18KB
MD5

2c81a88d21443a8ed8adcb6f8739aee7
SHA1

bc9938d3be8003bcda8c85bb47e710a734ecf333
SHA256

412a2d98cde2883570c7c2f66674370c4a04b0d7d27b1fe246274d99a2d236e2
SHA512

0d516a18f3032f674867647dd824aa598ce9a0ef613c50c37fee4afc00e8a3b0f8b60c8d0dd9596052aea1dc6043d209c1f5e018fec5aeac199fcbe1415afb16
SSDEEP

384:R9Xro1ye+PoYRm2hmlQmJmamnrL2y+8KcrbB:RpiyeERAltSnr6y+8KgB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c81a88d21443a8ed8adcb6f8739aee7_JaffaCakes118

Files

2c81a88d21443a8ed8adcb6f8739aee7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

59ebb6b247b46206d987e2a06bad01a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr71

_except_handler3
__dllonexit
__set_app_type
_controlfp
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_ismbblead
_exit
_XcptFilter
_onexit
_c_exit

kernel32

OpenMutexA
CreateMutexA
GetModuleFileNameA
GetTickCount
Sleep
FindResourceA
SizeofResource
LoadResource
LockResource
GetModuleHandleA
GetProcAddress
GetStartupInfoA

advapi32

GetUserNameA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ