2ebe045a5f2153c2fecf28392a52ffbb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ebe045a5f2153c2fecf28392a52ffbb_JaffaCakes118
Size

56KB
MD5

2ebe045a5f2153c2fecf28392a52ffbb
SHA1

c3c9d866fc23612a78ac8af6b7747412785cb7eb
SHA256

1e52f837ffe08dda3c231eb39d555138c1084a79679cb77daf9507f47734123b
SHA512

41acc36ba2e66558669f8274a3dacf8a55a42b32af4072d710431a979b5c33821258b0cb4f1ed30d6f7ccd2d95a28d125736b88f986b30d935d15c2c2f66c03c
SSDEEP

768:B1W1DH1SUl6N30TFYACSbkhcgwuZ4Yzp:B1WhH1SIHgwuyYd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ebe045a5f2153c2fecf28392a52ffbb_JaffaCakes118

Files

2ebe045a5f2153c2fecf28392a52ffbb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bf4f09833aefcd46029fd45b877d0bdc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_except_handler3
sprintf
__CxxFrameHandler
strstr
strrchr
_strlwr

kernel32

SetFileAttributesA
CreateThread
GetModuleFileNameA
GetStartupInfoA
GetModuleHandleA
OpenProcess
WriteProcessMemory
WideCharToMultiByte
IsBadReadPtr
GetProcAddress
CreateDirectoryA
FindResourceA
LoadResource
LockResource
SizeofResource
CreateFileA
LoadLibraryA
CreateFileMappingA
Sleep
GetLastError
MapViewOfFile
CloseHandle
CreateMutexA

ole32

CoCreateInstance

oleaut32

SysFreeString
VariantClear

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ