2bda2dc03fcf9fae610dc57ef4d04d9b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bda2dc03fcf9fae610dc57ef4d04d9b_JaffaCakes118
Size

135KB
MD5

2bda2dc03fcf9fae610dc57ef4d04d9b
SHA1

f5ae764433858fa75a48e83165320b5df6ac93c4
SHA256

06b657a27025b3c6587547ffc77ceb4e1587d9774ce2c5b0536c09c5fcf81f06
SHA512

6c0058d276e1d443b0e35e09fc3cd5919c222d02db65c256c7d1ab23e211224943721301049c443514bd12acf5a27c30b1fa2d748d0be791c9af8ed2a9256c8d
SSDEEP

3072:wYVFykbeMLO5z6fNwdaYAGABpBjX2Nygo4i3J/:wCwkqV5aN4aM6rjX0k3Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bda2dc03fcf9fae610dc57ef4d04d9b_JaffaCakes118

Files

2bda2dc03fcf9fae610dc57ef4d04d9b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ef157bebb1e840612d8ee7b460e32700

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
MoveFileA
HeapFree
GetModuleHandleW
WideCharToMultiByte
LoadLibraryExA
GetCurrentThread
lstrlenW
GetFullPathNameA
RaiseException
GetCommandLineW
ExitThread
GetProcAddress
GetThreadLocale
GetCommandLineA
VirtualAlloc
ReadFile
ExitProcess

version

VerInstallFileA

advapi32

RegCreateKeyA

msvcrt

asin
pow
cos

shell32

SHFileOperationA

ole32

OleRun
CreateBindCtx
StringFromIID
CoCreateInstanceEx
CoCreateGuid
CoFreeUnusedLibraries

Sections

CODE
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 614B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ