2d568dadb80e9eec76b50ad1a346cfff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d568dadb80e9eec76b50ad1a346cfff_JaffaCakes118
Size

176KB
MD5

2d568dadb80e9eec76b50ad1a346cfff
SHA1

6a8ed1c0b955e51b392f30c002a16fd2b6018aad
SHA256

d8d35cd11d435da8ff8db3191dbc739b04317542ce4e8b3e60fd2ebc614e9139
SHA512

417f6c9f265d8754e9a4dbefb13f3993842048309b3ff9830447b0f2067439bb022edf8efc5a7ca7200599b45eeccf4786827212d249133a5345d0698ae16aeb
SSDEEP

3072:L3cO1lhXf+IaRcS9GvOhyBE6frfBk0PeU8v8H70J4SJcpIPE0oUTSqzzQzL:ImJTaR37yBE6TfNgv8H1pIPEJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d568dadb80e9eec76b50ad1a346cfff_JaffaCakes118

Files

2d568dadb80e9eec76b50ad1a346cfff_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5e65364987a2838cf965cbf641233dec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Information\Desktop\Windows\OS_Starter.exe

Imports

msvcrt

_cexit
_exit
__p__fmode
__setusermatherr
_XcptFilter
fseek
__p__commode
fread
__set_app_type
_controlfp
wcstombs
strspn
_initterm
_ismbblead
exit
wcspbrk
_amsg_exit
ungetc
__getmainargs

kernel32

FindResourceA
SetCommBreak
GetDateFormatW
CreateFileW
GlobalFlags
DeleteFileA
SearchPathW
FileTimeToDosDateTime
CreateThread
WaitForMultipleObjectsEx
GetShortPathNameA
MoveFileA

Exports

Exports

_ReplyMessageReplyMessageReplyMessage@0

Sections

.text
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ