2c8e3aff62a0de5b64daef1d2d4ed48d_JaffaCakes118 | Triage

Sharing

General

Target

2c8e3aff62a0de5b64daef1d2d4ed48d_JaffaCakes118
Size

32KB
MD5

2c8e3aff62a0de5b64daef1d2d4ed48d
SHA1

64733b8b6d0bddbcb25e5453106d8c06ac612347
SHA256

91125c94030184a92b01ccf53b0930d00703ddaba5e82f8cb5d2f77afc0fb4ad
SHA512

c13d4621c457adf8eebaa034ccbf5844aa670b7b7d2fe0583ed9e7b77b29e81288b94948e5516026a7f227a44d05390237977eb0501fe23a36fbc1a2b23f5eb8
SSDEEP

384:4qGV3nw19424D3ucKPouKKsde8+Ha0rJ6:8V3K94BD3lKPoQsdeLXd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c8e3aff62a0de5b64daef1d2d4ed48d_JaffaCakes118

Files

2c8e3aff62a0de5b64daef1d2d4ed48d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ccbf26a90d4f64b3cf4a07b3b95a2a0e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WinExec
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
GetTempPathA
GetSystemDirectoryA
ExitProcess
LockResource
LoadResource
SizeofResource
FindResourceA
GetStartupInfoA
GetModuleHandleA

msvcrt

_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
sprintf

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 762B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ