2f3a132e681769e66d3710befdb0cb56_JaffaCakes118 | Triage

Sharing

General

Target

2f3a132e681769e66d3710befdb0cb56_JaffaCakes118
Size

40KB
MD5

2f3a132e681769e66d3710befdb0cb56
SHA1

21eebe7bb62b688131ab4a0ec0c05f60609c12be
SHA256

c5e55de19a9e6823fc1db0c3c5c6637562002632b982338e3fe863ffef4337de
SHA512

038948d336d09409f5553ac30a600efaeac8feefb2fba70166e24b966d63245b74ec10167f2ca897ae16998ecefd6502066a302ba0ca902715656c0e56a23dd6
SSDEEP

768:WVzzbiIQLe/aEqiqTqTzfjPH/Y41oQedksYot4zPB4QCpgSDSd:CnqMaUqTqzDH/tYdkEtECKS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f3a132e681769e66d3710befdb0cb56_JaffaCakes118

Files

2f3a132e681769e66d3710befdb0cb56_JaffaCakes118
.exe windows:4 windows x86 arch:x86

db5368f16fc036edb0ea87f29001684a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memcpy
memcmp
_umask
??2@YAPAXI@Z
_spawnl
_stat64

kernel32

GetSystemInfo
GetVersion
GlobalAlloc
GetNextVDMCommand
GetDriveTypeA
GetStdHandle

Sections

.text
Size: 13KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE