2fd356ea29c8ef652722c92080065d34_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fd356ea29c8ef652722c92080065d34_JaffaCakes118
Size

86KB
MD5

2fd356ea29c8ef652722c92080065d34
SHA1

ba7ea8953c47b358625e683415f7fda7c04c02f4
SHA256

0b918f81e0f37b007e0209dbb0a24f1b52d9e27d2881eb7e14d3ce6f4bfab30b
SHA512

5985584a3410b674378724b87ff71f32b4f4145a2566cff51bf2e0abce2ffffc357d550cbe598135ace11b356de7c4331cdd2bf89e9a97c931725b71b230b229
SSDEEP

1536:weLIEzOBr8Hz5auRa+e8HbmX2ibfUWhPj0p+eHh8i+sza21WG9HQlhB2aDS:wdBqa+e87IUlp+i8rQfgB2aDS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fd356ea29c8ef652722c92080065d34_JaffaCakes118

Files

2fd356ea29c8ef652722c92080065d34_JaffaCakes118
.exe windows:4 windows x86 arch:x86

803ddc7824128081a6cc11bbcea31a20

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strncmp
__setusermatherr
_strcmpi
strncpy
_isctype
_strnicmp
fopen
tolower
strcmp
wcsncat
ftell
qsort
memcpy
strrchr
malloc
_wsplitpath
_itoa
_snwprintf
_splitpath
_adjust_fdiv
_acmdln

kernel32

GetLastError
GetCommandLineA
ExitProcess
GetTickCount
GetModuleHandleA
GetSystemTimeAsFileTime
LoadLibraryA
GetVersion
GetCurrentThreadId
GetModuleFileNameA
lstrlenA
GetPrivateProfileIntA
SleepEx
SetConsoleInputExeNameW
FreeLibraryAndExitThread
GetCompressedFileSizeW
SetSystemTimeAdjustment
CreateProcessInternalA

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ