2f7c78d9c24c47449c97648c0a9aaff0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f7c78d9c24c47449c97648c0a9aaff0_JaffaCakes118
Size

44KB
MD5

2f7c78d9c24c47449c97648c0a9aaff0
SHA1

e96ec1272aa6b8c45e044b587fe615c51f65632e
SHA256

1bbe108bf3b9eebf21cdb6f83143efbc2fb06f8a9f09f4c15f94dbe71a9cfd0c
SHA512

f746edb8255a4eb412e23ce2bb5277239ad944ab23728f78a8457e7f7068674d5fad4f9e119c8da8ad7dd7b826189fc8ae42e56d5daf7282290c842c4fe6e031
SSDEEP

384:15oyMvL+onXA/LsPCvNdR3y+hHlxtBnywPL1S6oZjQlc7najxpUMQNlKL:jovvnnwppB9Lc6odQa7nWporK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f7c78d9c24c47449c97648c0a9aaff0_JaffaCakes118

Files

2f7c78d9c24c47449c97648c0a9aaff0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4e7e54e84f286ad97192e61a16db5492

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WinExec
GetModuleFileNameA
GetModuleHandleA
GlobalAlloc
Sleep
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE