c2a3fbd8087309e58f7944e21042c956_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2a3fbd8087309e58f7944e21042c956_JaffaCakes118
Size

112KB
MD5

c2a3fbd8087309e58f7944e21042c956
SHA1

68de294f2d2032f680650d28e069b55b537fd0a8
SHA256

d86853d4f6f90094f503f0ac4787da6d5a4b9b057740e8ecc4160f71643fc0bc
SHA512

4229219a3c171e93e6e541e61f5afe64b784b2fda8ecc4cfde193a6af68fcc794b3a1fc766a6b25a28ba48474e756b82f08f9c7a265f268960d80b63a96a1677
SSDEEP

3072:dS56fPXoyiwD2hHuwBDSQVHo5JK3eoh7h+Y0qTZn2DR:dLXXpZDcuaDfVHonY06d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2a3fbd8087309e58f7944e21042c956_JaffaCakes118

Files

c2a3fbd8087309e58f7944e21042c956_JaffaCakes118
.exe windows:5 windows x86 arch:x86

bdca6745ad846caafb88ff11e229b56e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
IsDebuggerPresent
GetTickCount
GetCommandLineW
GetProcessVersion
GetVersionExA
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetStartupInfoA

shlwapi

PathGetCharTypeA

shell32

SHFileOperationA

msi

ord40

msvcrt

_adjust_fdiv
_onexit
__dllonexit
_exit
_controlfp
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_XcptFilter
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ