2cca0e8928614b04dd492c4941dc594e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2cca0e8928614b04dd492c4941dc594e_JaffaCakes118
Size

65KB
MD5

2cca0e8928614b04dd492c4941dc594e
SHA1

c9efd430a58db2d39d83b158c0893356d74d9a7e
SHA256

9346578247361549acb5499684b2a7d0db9abe14c67f9b1940609e2c3b40c1a4
SHA512

fa76de5394fb43adba3c040eaa5c5c04a5899795270ceba3ffc0c27b2ec90c6922ab2b8a197fa537412b94c1caef88448e63e6d71a56a596efd2f0e981bae6c2
SSDEEP

1536:PqaT7VW7WCLNwXnAgz9BjG1p8FcySwxCgm7Au3UW:jT7VwWCeA89A1kcyLc3t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cca0e8928614b04dd492c4941dc594e_JaffaCakes118

Files

2cca0e8928614b04dd492c4941dc594e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e1112b6722a3cce6443d7e0d778068c4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
FindResourceA
SetCurrentDirectoryA
SetLastError
ExitProcess

msvcrt

__p__commode
__set_app_type
fprintf
swscanf
wcscat

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ