2c6fb32509f32d74f6bc2a7fb0310c3a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c6fb32509f32d74f6bc2a7fb0310c3a_JaffaCakes118
Size

773KB
MD5

2c6fb32509f32d74f6bc2a7fb0310c3a
SHA1

176b7c6aa907da0e6ebf9d0ab3c366a86055588d
SHA256

6248c33e79b9b24f2691330bf61c1cd0a3c305346c07664be63e43d980e27e9a
SHA512

8dd636f5055dec9bbee8d3c189e89784bfd88cf19a9e6923c2f493cd05a7e026d61059da8ec61b704657022dcdaaccf9713885d186f20909e1d3ca91448720d9
SSDEEP

24576:ew3y+wporN3EL9oHQGfGBTamqDMmCpdvbGi:ew3yhANAfWsDbG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c6fb32509f32d74f6bc2a7fb0310c3a_JaffaCakes118

Files

2c6fb32509f32d74f6bc2a7fb0310c3a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

238619562749e8af095c9f29efac5120

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
GetCurrentThreadId
GetLastError
LocalFree
GetVersionExW
HeapFree
HeapReAlloc
HeapAlloc
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetTempPathW

msvcrt

_initterm
_XcptFilter
_cexit
__wgetmainargs
log10
memset
_wtoi64
iswdigit
_controlfp
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
exit
_exit
_wcmdln
_initterm
memcpy

Sections

.text
Size: 440KB - Virtual size: 439KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 315KB - Virtual size: 315KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ