2cecd99ba3da8d57c4f883426f1a2640_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2cecd99ba3da8d57c4f883426f1a2640_JaffaCakes118
Size

22KB
MD5

2cecd99ba3da8d57c4f883426f1a2640
SHA1

ffe6859210498a80c9d8f70992e511f3ecb62c92
SHA256

ae907dec79cd2cb7c267a4827a2e903e7edada107db43f0efc35229dee5ddb18
SHA512

4b50522fc867f734c322bb33307c8195a304d61e91ef124d3f3069f70df67d237341c73d4c16076fabb22f71df224d6cf58716fed0fa31fbf1b7f88c63bbfd8f
SSDEEP

384:ktDxpjO4XwYZbDe+2Ec+GFUgnHHeK7rdHKe5h:GDNhe7FjWgnHHV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cecd99ba3da8d57c4f883426f1a2640_JaffaCakes118

Files

2cecd99ba3da8d57c4f883426f1a2640_JaffaCakes118
.exe windows:4 windows x86 arch:x86

88142c580fd034b9941a2ecc43306212

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
SetUnhandledExceptionFilter

msvcrt

_spawnl
_cexit
_fileno
_findclose
_findfirst
_findnext
_fmode
_fpreset
_iob
_setmode
__getmainargs
atexit
fclose
feof
fopen
fprintf
fread
fwrite
__p__environ
rand
remove
rename
signal
sprintf
srand
strcmp
__set_app_type

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.stabstr
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ