2c312003927c22bdf230a8c7644b73ac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c312003927c22bdf230a8c7644b73ac_JaffaCakes118
Size

192KB
MD5

2c312003927c22bdf230a8c7644b73ac
SHA1

7c62fa9a86297c73d5ec42c2d130a77852461ed9
SHA256

07803711cc48b1ffb964098bf27d2691bad22548bf9bd0195526532ae8320d76
SHA512

960cbd7092d8b43c2b0ce727809d183e23e5a5eeba78ac120ddd6c81a38be4eac643af3b6cdff5053f1b80f42926d92c5b1bf7a56bb653bd476e5681a66cf2b9
SSDEEP

6144:FaHqEFs8dz/vNwqKnE2k6FtVlEqHFqrPRUs:MH3dDFwqKVAF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c312003927c22bdf230a8c7644b73ac_JaffaCakes118

Files

2c312003927c22bdf230a8c7644b73ac_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6548ff8d37fd4428711c5693705303c5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadUILanguage
HeapSetInformation
GetCurrentProcess
GetModuleHandleW
GetModuleHandleA
LoadLibraryA
GetLastError
LocalFree
FormatMessageA
InterlockedExchange
VirtualAlloc
SetUnhandledExceptionFilter
GetCurrentProcessId
QueryPerformanceCounter
GetTickCount

msvcrt

__set_app_type
_write
_exit
_amsg_exit
_iob
_controlfp
printf
putchar
_cexit
fflush
strrchr
_initterm
exit
__getmainargs
__p__fmode
__p__commode
__setusermatherr
_setmode
?terminate@@YAXXZ
_XcptFilter

ws2_32

getaddrinfo
freeaddrinfo

mswsock

s_perror

user32

CharToOemBuffA

Sections

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ