2d2c9b2cad10e83ca4a5f6a169811fc2_JaffaCakes118 | Triage

Sharing

General

Target

2d2c9b2cad10e83ca4a5f6a169811fc2_JaffaCakes118
Size

12KB
MD5

2d2c9b2cad10e83ca4a5f6a169811fc2
SHA1

a7cf7174cff2d7299bd8c6f03c2f4e945414f96f
SHA256

63867f3284a583805c234b6ca25fa9c86326c51b68e28b0b520c8801a1f2dea2
SHA512

912a7f9ffca0457bfa03bec14866a9bcb30288211ed4b3a19a146b40d67b4203b885459cb17dbc9c0db955f98457d6837705ea2fb10034766843c13a3019fed1
SSDEEP

192:C/7CZicZjvJySABp+cVjOqU6hI/28bDaszhWIP4oyOQoHchG1xf:CzCrPbM8cVCqM/2uGszL40b8hE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d2c9b2cad10e83ca4a5f6a169811fc2_JaffaCakes118

Files

2d2c9b2cad10e83ca4a5f6a169811fc2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

84e1514c45a45aefeb59ed9860faddf2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
CreateProcessW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetPrivateProfileStringW
GetPrivateProfileIntA
lstrcatA
DeleteFileA
Sleep
FindFirstFileA
GetModuleFileNameA
SetFileAttributesA
GetCurrentDirectoryA
CloseHandle
CreateThread
ExitProcess
GlobalMemoryStatus
LoadLibraryA
LocalFree

user32

wsprintfW
IsWindow

ole32

CoCreateInstance
CoInitialize
OleRun

oleaut32

VariantInit
VariantCopy
VariantClear
SysFreeString
GetErrorInfo

msvcrt

_controlfp
??1type_info@@UAE@XZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
strlen
_except_handler3
rand
srand
time
wcsstr
__CxxFrameHandler
_EH_prolog
rename
sprintf
free
malloc
_CxxThrowException
??3@YAXPAX@Z
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
_wcsupr

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ