2c30b8fb8a9b9946761acb9de2dcd9fc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c30b8fb8a9b9946761acb9de2dcd9fc_JaffaCakes118
Size

1.7MB
MD5

2c30b8fb8a9b9946761acb9de2dcd9fc
SHA1

5d9e61f3c7165bdab517c59df15443f4df1c1117
SHA256

00c41b69a796f24bf424da9b2024cfed00d7cb46ba90ac0b0efa7541cc32f392
SHA512

ef04b7d303ebe6314cbfa75f1c2c5fd337ed42b4ad2817891a5040f1b7c473edf7e322bd30c048c23583bae3c8014fab0b7652ed6afb9be1089e16d82422c8cf
SSDEEP

24576:31QMY/zoxHZWDA2H9QSpT3ofqH9kg2VndtUkIQp7cv1Xtt0SO2UFKmSSgTfD1xVU:lQvro5oUqdkgCwQK5PBccmSrTpxVbY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c30b8fb8a9b9946761acb9de2dcd9fc_JaffaCakes118

Files

2c30b8fb8a9b9946761acb9de2dcd9fc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

032bffe5df3b5e047e6b7399274af60e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
FindResourceA
LoadResource
GetTickCount
GetWindowsDirectoryA
WriteFile
Sleep
SizeofResource
CreateProcessA
LockResource
GetCurrentDirectoryA
CloseHandle
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess

msvcr90

_crt_debugger_hook
srand
rand
sprintf
memset

Sections

.peglue
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ