2d6c67e37bf3c195030a94e183b15c6e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d6c67e37bf3c195030a94e183b15c6e_JaffaCakes118
Size

17KB
MD5

2d6c67e37bf3c195030a94e183b15c6e
SHA1

c2ecd8861da0d645102b37f572b750ad332af225
SHA256

935c992fc600d4deefae43b86829a24609c5ab65689e0009ce2643be705654ee
SHA512

476a05409f961db3f9a59b7806c8000b833751b7d469dab37bf58823ef0ae124302d23a89c6953102926bcef023cbb0d7aa275b9ecbf927965fe44082f5a700e
SSDEEP

192:3C2DHKu36vSBzh3zbpn143x0odkjyFytYo7CD1:yoKvSfHp14B0FectYoOp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d6c67e37bf3c195030a94e183b15c6e_JaffaCakes118

Files

2d6c67e37bf3c195030a94e183b15c6e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae9b681710949bd686bfb980f3a2c4e0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter
Sleep

msvcr

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
signal

user32

GetSystemMetrics
SetCursorPos

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE