c2787defd50f9f28da43509c59c7b828_JaffaCakes118 | Triage

Sharing

General

Target

c2787defd50f9f28da43509c59c7b828_JaffaCakes118
Size

105KB
MD5

c2787defd50f9f28da43509c59c7b828
SHA1

2043d856780288799a0edcf49b55f8e421ace087
SHA256

5c691378c1616e2ba53b70976cac8c3b906d67325cc8c1e0dcefce7f89ace739
SHA512

0621d0afea628c3e43a243b690f912d467d5e11f6af59eb5e65780f79120a096e9b91dfcf5d3f5b482bd52ad0ae844e486475f7b7a5fbe081e63894f17d61939
SSDEEP

3072:hsMEz2XxYpm/xNoKyMS5eV9tKhMCuL9zI/xNoenv/xNofD14+g7y9:hsNzUxYOPFqe7MGCusPJ3PAR39

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2787defd50f9f28da43509c59c7b828_JaffaCakes118

Files

c2787defd50f9f28da43509c59c7b828_JaffaCakes118
.exe windows:4 windows x86 arch:x86

82d89cbf40d4f6eac29128babb0c4181

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_initterm
_except_handler3
_controlfp
__getmainargs
_acmdln
exit
_XcptFilter
__set_app_type
_exit

kernel32

GetModuleHandleA
GlobalGetAtomNameA
OpenSemaphoreA
IsBadCodePtr
GetStartupInfoA

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ