2ec177ebdad1f0a34a42cc1f9faa01d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ec177ebdad1f0a34a42cc1f9faa01d8_JaffaCakes118
Size

82KB
MD5

2ec177ebdad1f0a34a42cc1f9faa01d8
SHA1

d995ff732b7760df09b56d8f056d99140d737fa4
SHA256

0c0b68409157e17c5aff74b72dd5268bdd3041328c9d829be30cbb8f1be2ae07
SHA512

176ed78b7ebdb62e39db5a9153da4ce1a712d1d11eea94b83339f72f7663bddd88f933abcc0bcb08b15452fd8f07062572177a899bb92a0082ac72bf32886653
SSDEEP

1536:R/U1PIRQNQ/mtGn+x1L+6gClzQS/MSX6sZOmXsHAqprSQRYHIzd1F:R/U1PIGi1+fgC9QS/r4mXUAEd1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ec177ebdad1f0a34a42cc1f9faa01d8_JaffaCakes118

Files

2ec177ebdad1f0a34a42cc1f9faa01d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

24b82c811418e9b1671267a84a8ba17e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fclose
_XcptFilter
_exit
memmove
exit
__setusermatherr
fopen
_stricmp
_adjust_fdiv
_acmdln
sin
strcmp
free
__p__commode
fprintf
__getmainargs
malloc
_initterm
__set_app_type
memcpy
_onexit
_except_handler3
fwrite
strlen

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ