2e96cce0a24237060c4c0d14c9544323_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e96cce0a24237060c4c0d14c9544323_JaffaCakes118
Size

100KB
MD5

2e96cce0a24237060c4c0d14c9544323
SHA1

e5a5abf64153e91e3d874abb12d8977370b0ec76
SHA256

ed820504dd36e2041988de5e190219a9da76827f2a581434187b3ce24790609e
SHA512

2011da9d545dc2efda16821dddeba064533522ed462236aa2bf02d8294fb9ab0329a66d32e81223334ecb0a4367960d5ba1235c7f1974fcc96d03f7cf0c53562
SSDEEP

1536:6yiS29VxP1WTmNV9yycUY1HE3ax3hPg19oA7QnLCNgPnLcgb64YOMJUwXEvhA0M:6yAbxVtyygl3hIfoAy+mTcgeOOBXEvDM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e96cce0a24237060c4c0d14c9544323_JaffaCakes118

Files

2e96cce0a24237060c4c0d14c9544323_JaffaCakes118
.exe windows:5 windows x86 arch:x86

16c66f6c9da87dd9e626581dd6ee0090

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalGetAtomNameA
ReadDirectoryChangesW
GetModuleHandleA
GetStartupInfoA

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
memset
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
memcpy
__setusermatherr

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 687B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ