2ce2563c14e7f6b2214e13ebee16b6a7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ce2563c14e7f6b2214e13ebee16b6a7_JaffaCakes118
Size

697KB
MD5

2ce2563c14e7f6b2214e13ebee16b6a7
SHA1

a678c196421d977c37633385a3e090a212c32fd3
SHA256

0a0d542be6c81fb25d6b7ae8449e2913674b2d256ae9f8b1f35e9ecb1a6cce9a
SHA512

3a9c236d64c13c5eca6f9eb28b545d52e75f1307f6b3341b8f59ed82407f45165af54699c281604356a1bdace5d80a52099a36b28fd5a634740e80c8539435e4
SSDEEP

12288:OmPdhSfWW8fFkJaRUb94RNVKOaYvlezPw/kcFc8XqczcY02QZYagKM8S:HAWZmWKOfezPnGcAv6Yp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ce2563c14e7f6b2214e13ebee16b6a7_JaffaCakes118

Files

2ce2563c14e7f6b2214e13ebee16b6a7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5e7d6e2b1a006eae3d50d918bb784833

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
GetTickCount
GetLastError
GetVersionExA
lstrcpyA
lstrlenA
GetModuleHandleA
LocalFree
lstrcatA
Sleep
GetFileSize
GlobalFree
FreeLibrary
CloseHandle
GetStartupInfoA
GlobalAlloc
GetCommandLineA
CreateEventA

msvcrt

toupper
_adjust_fdiv
wcstoul
rand
__p__fmode
memmove
_exit
__CxxFrameHandler
wcschr
_acmdln
__setusermatherr
_except_handler3
wcslen

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 679KB - Virtual size: 680KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 724KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ