2f34289b32df241261a5b3517a989f7b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f34289b32df241261a5b3517a989f7b_JaffaCakes118
Size

25KB
MD5

2f34289b32df241261a5b3517a989f7b
SHA1

64c278a18517dfa1f176729adb3ed4ef9d7aad0f
SHA256

2a53c918ad75f9f44ff1900d068fa304eebd665ce5b324fde6eab6eb7b1e2507
SHA512

ef8fe810d68c53d47e4c4118bf9cf714af0b8d28f83ab8864651a276026dd6c789d017b4b570b86e3ba42e8c474f3f820a57cfb12fc887f5529096a6fa2ebd2e
SSDEEP

384:9qTtZNp2Zs1lOJEBEk00mUM73pF1ue1ITWheINGi1A0AIwFmdS+1:9qT3bOJEOkpmUM7ZDu3ahen03wFwZ1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f34289b32df241261a5b3517a989f7b_JaffaCakes118

Files

2f34289b32df241261a5b3517a989f7b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

51eeb0adce70d8fcf1ae4a18b0081aae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
ExitThread
BackupRead
Beep
FatalExit
GetModuleHandleA
GetStartupInfoA

msvcrt

exit
_acmdln
__getmainargs
_initterm
_XcptFilter
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
__setusermatherr

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 687B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ