2bcdf4133d22e91b56de53d6cd8d97db_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bcdf4133d22e91b56de53d6cd8d97db_JaffaCakes118
Size

10KB
MD5

2bcdf4133d22e91b56de53d6cd8d97db
SHA1

66e604a62b03dd8262c00892e4b32ab8ecbc9d60
SHA256

f503560eb6c9fc38fde134991ceac8088cda268b9b6b1083f3d58bf3d52f5c0e
SHA512

ef04729ca3ecdc8609758f2df548ad6c7a106c0e9eca6b842008636c1194ac6359506b7e7155515e56b8fc69da3f1cd6e17d9412d37f8df22a0da37b9c2cb1a5
SSDEEP

192:GmPD74pIdjrRfehBkwZEXezeK1d99hSplP1oyPn+YkMdJevXO:DPv4pcr1QloKv99hm1l+Y5GvO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bcdf4133d22e91b56de53d6cd8d97db_JaffaCakes118

Files

2bcdf4133d22e91b56de53d6cd8d97db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cf31dc51b2874c659c350399f41ee363

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
lstrlenW
MultiByteToWideChar
lstrcatA
GetFileAttributesA
FindClose
FindNextFileA
FindFirstFileA
Sleep
lstrcpyA
GetLastError
GlobalAlloc
GetSystemTime
ExitProcess
ReleaseMutex
CreateMutexA
SetErrorMode
GetModuleHandleA
lstrlenA
CreateFileA
CloseHandle
GetTickCount
DeleteFileA
InterlockedExchange
GlobalFree
GetStartupInfoA

user32

wsprintfA

advapi32

RegOpenKeyExA
RegSetValueExA
RegCreateKeyA
RegQueryValueExA
RegCloseKey
RegOpenKeyA

mpr

WNetEnumResourceA
WNetOpenEnumA
WNetCloseEnum

msvcrt

memcpy
_except_handler3
memset
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE