2ce9cf6d807c4753c959bd953fed8143_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ce9cf6d807c4753c959bd953fed8143_JaffaCakes118
Size

24KB
MD5

2ce9cf6d807c4753c959bd953fed8143
SHA1

3f771a4e7ef77cc928217fe1cfe32a65f269f957
SHA256

4e2f55e184e37459f87edbd8d92edac03278899415c4289fee0c5db572c308ce
SHA512

96fb5b1e77a0530750dcbfca4daa574afa4e0feaf91475bdf79e4f9fd34ef56392984256cf2f8c70f9f392cd32fbc8369ec5b140af8a11cdc543305bcd7d6278
SSDEEP

192:MCqE9uBTUoyng37MhHXzGRuNl3TLRwDyQWXlgXEKzwkgUw9ITx:MpR4a37MpXqRwlDa25gUKbP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ce9cf6d807c4753c959bd953fed8143_JaffaCakes118

Files

2ce9cf6d807c4753c959bd953fed8143_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d8bd73b76bcb8f33b5d160fea3324ccf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
sprintf
exit

kernel32

GetProcAddress
GetStartupInfoA
GetModuleHandleA
GetModuleFileNameA
GetShortPathNameA
GetEnvironmentVariableA
lstrcpyA
lstrcatA
GetCurrentProcess
SetPriorityClass
GetCurrentThread
SetThreadPriority
CreateProcessA
ResumeThread
GetSystemDirectoryA
Sleep
LoadLibraryA

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 870B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ