2cb8e5ce8f73ba0bb93c3e93d8804f39_JaffaCakes118 | Triage

Sharing

General

Target

2cb8e5ce8f73ba0bb93c3e93d8804f39_JaffaCakes118
Size

76KB
MD5

2cb8e5ce8f73ba0bb93c3e93d8804f39
SHA1

9f88ef4c142db727d1995e54f7826f479c3b2f37
SHA256

c5b9798e4bbe34b5f98c78e7303fc50b8fd7a04a358d58b3bffc70069e67fbe4
SHA512

927adb0aa9e7a1383afd0e08dfbe970686c078c770ee0b583c9e2e4a616f701c0716fac3d5e21af88ff8aeeb34c380ef6970a6cab8e060902590d298298c9000
SSDEEP

1536:xY2sLbku3JWVpWyyQgYZZ9wghtbX6Vl43vEa6szS:xY2UJWIdWZ9w8bKVleEa6szS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cb8e5ce8f73ba0bb93c3e93d8804f39_JaffaCakes118

Files

2cb8e5ce8f73ba0bb93c3e93d8804f39_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b6ed62b38efa4b54c471f651f8f1d8b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
_acmdln
free
strlen
strncmp
fprintf
_XcptFilter
_initterm
malloc
fclose
_onexit
strncpy
__getmainargs
fwrite
__setusermatherr
sin
_exit
_iob
strcmp
_adjust_fdiv
__set_app_type
_except_handler3
exit
fopen

user32

GetDesktopWindow

kernel32

GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ