2e6a1d0af67e69487320beb9c3538175_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e6a1d0af67e69487320beb9c3538175_JaffaCakes118
Size

160KB
MD5

2e6a1d0af67e69487320beb9c3538175
SHA1

8cca412d20db2d80fee3b6f6607aa4168ba1c16b
SHA256

b9fc053db1e57f9483bca3de4b8d49fe24220963a500aaa5fb8b0b77f82d8340
SHA512

255cf8bbce465adcaa0f9cf89f3b1a495fb64d94e723e15c4dfbbfe741e7c7394c9616ebc23fb9d74cc8c6460bff4711b0fe383596f954f27cb8d5e55b2486bb
SSDEEP

3072:kZMUFnjMTSRd8cZakbXPLalJvHFierwVGzytTBffdVL:klnjuWXPLarvHEoeWytTB9VL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e6a1d0af67e69487320beb9c3538175_JaffaCakes118

Files

2e6a1d0af67e69487320beb9c3538175_JaffaCakes118
.exe windows:4 windows x86 arch:x86

30c23f9bb31e43524423d45bcfe7eab4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameA
GetCompressedFileSizeW
WriteProfileSectionW
WriteProfileSectionA
GetSystemTimeAsFileTime
WritePrivateProfileStructW
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA

msvcrt

__CxxFrameHandler
memset
_CxxThrowException
memcpy
_ftol
_purecall
malloc
??3@YAXPAX@Z
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
_controlfp
??2@YAPAXI@Z
free

Sections

.text
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ