2fbe86e079c9da79113fed4c18620f99_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fbe86e079c9da79113fed4c18620f99_JaffaCakes118
Size

47KB
MD5

2fbe86e079c9da79113fed4c18620f99
SHA1

1dd09e60c5443d5f31f142ee1e87d9bbcd683470
SHA256

4246f6139e0795713d1dc7c173fa21f482bd0f3930aa267d54c8fc71e40bb4c0
SHA512

c9e8dfb812b7b85597f4af029ab3c087fe124ad888f0eea59c02ebd5ebee88e62c49671a26a6b44d3f8bb1ef47801a50786d33d89f3f6a506a3d30ca212ba899
SSDEEP

768:7MMzS3k+qpKiSyV2wnGZ/No33GqbLeroLToLBBGy3ndzRAocz9IV/3X0/yd8g:7MYnSyL0ymqbLesvEB33dddQuV/3X/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fbe86e079c9da79113fed4c18620f99_JaffaCakes118

Files

2fbe86e079c9da79113fed4c18620f99_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7c2bc85599e9567a0508d3a84089c116

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
CloseHandle
CreateFileA
lstrcatA
GetWindowsDirectoryA
GetModuleHandleA
GetStartupInfoA
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
HeapSetInformation
FindClose
FindFirstFileW
lstrcmpW
FoldStringW
GetCurrentProcessId
GetCommandLineW
MulDiv
GetFullPathNameW
LocalSize
GetLastError
WriteFile
SetLastError
WideCharToMultiByte
SetEndOfFile
LocalReAlloc
GetFileInformationByHandle
HeapAlloc
HeapFree
GetTimeFormatW

Sections

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 574B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ