2ece9f6f829f94ae348602a336df4725_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ece9f6f829f94ae348602a336df4725_JaffaCakes118
Size

73KB
MD5

2ece9f6f829f94ae348602a336df4725
SHA1

1c47da6f3b90cfb63b1abc77a13ea2ab0457cae1
SHA256

8daf5640f3c28508f40a5f7055199a576af7e7bc45d71c77ea5a15b509bc3e3f
SHA512

023d9a1d9189276df1be2904c1249cedcbdca8f3401c3a3208f90ada01e2485d6f5fa9b4b89893c8cc5cbbecd1e913bad3585d181f1c08cf1282ed545d9b89fd
SSDEEP

1536:FVrT6t0p8M/vu9qmaabzh7qCIrZYJ3TjbEE/1OLwCHKjD502KHugK3S:OWHu9q1mzhcVYt91OL6uSC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ece9f6f829f94ae348602a336df4725_JaffaCakes118

Files

2ece9f6f829f94ae348602a336df4725_JaffaCakes118
.exe windows:5 windows x86 arch:x86

71d3a6a0501ce434892b77a599a18a0d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

cos
sin
fgetc
_XcptFilter
exit
rand
_initterm
__setusermatherr
strtoul
__set_app_type
rewind
_fstat
malloc
__getmainargs
towupper
_acmdln
__p__commode
__p__fmode
_except_handler3
_adjust_fdiv
free
_exit
pow
_itoa

kernel32

Sleep
GetModuleHandleW
GetStartupInfoA
VirtualProtect
RemoveDirectoryA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE