2ed3ae88e6adbad823bee0c599e3a5e3_JaffaCakes118 | Triage

Sharing

General

Target

2ed3ae88e6adbad823bee0c599e3a5e3_JaffaCakes118
Size

141KB
MD5

2ed3ae88e6adbad823bee0c599e3a5e3
SHA1

62fb3dc8eb6c358cdf29637a91efffd1dd7be5e7
SHA256

da4f7b4e272121dc7ca60cc7f55648dd7238176541dbbdfeb5614aed3218f853
SHA512

4444f04f3725960bb66387d425c1b31e3079c0da11c75474cf81f3d9327ade970e0eca49b5398eb2e437f556ac9ace02ea26b67608c0716ebcbd84c3b6701d40
SSDEEP

3072:3eGbQ6QCrx5OLIyg1jPHOg7OPPmMl+Rqbwjhhrje2/EwA7HYGchPn7pEVJgIYnmW:uQICrjOUyob/KPPmW+UbwjHry289zYGO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ed3ae88e6adbad823bee0c599e3a5e3_JaffaCakes118

Files

2ed3ae88e6adbad823bee0c599e3a5e3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dfee6a07593cfe60b151ebe48a7bf5a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
__p__fmode
__set_app_type
_adjust_fdiv
_controlfp
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_except_handler3
_exit

kernel32

OpenSemaphoreA
GetProcAddress
ReleaseMutex
FindResourceA
GlobalFindAtomA
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ