2d2d6c46c8d1a7bf7cfa66a57a100e00_JaffaCakes118 | Triage

Sharing

General

Target

2d2d6c46c8d1a7bf7cfa66a57a100e00_JaffaCakes118
Size

29KB
MD5

2d2d6c46c8d1a7bf7cfa66a57a100e00
SHA1

bcd5e9eb1a767e7dde1f1c7714828123b49ec13b
SHA256

704e5a522f502afd05a900b1106f5e60e671996d372601de2234d19de51657f1
SHA512

da8680cc4fae6cc2db8d66ff3cb610219e1f3d0b96a1f45812a1a681c18b77a9bf4133915aff9fbd1dc604038c26684dd94f464fa70c913dbe7de914e0e15705
SSDEEP

384:pbb4PMCG7ZsyMUzomlmxanBi6Ru01fOoshHOkhy9Vb0y/6XPCm9ViheuJ76NJod:5UCsKn5Vf6IV0ySP905FYJod

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d2d6c46c8d1a7bf7cfa66a57a100e00_JaffaCakes118

Files

2d2d6c46c8d1a7bf7cfa66a57a100e00_JaffaCakes118
.exe windows:4 windows x86 arch:x86

609cbb0486937808dd40193d4c501720

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Beep
WaitForSingleObject
CreateThread
GetModuleFileNameA
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualFree
VirtualAlloc
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapDestroy
HeapCreate
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE