2ef464addad913da6d3df898125398b7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ef464addad913da6d3df898125398b7_JaffaCakes118
Size

218KB
MD5

2ef464addad913da6d3df898125398b7
SHA1

bca61fcf2590eede6eba4b35bf5d04fd468608d9
SHA256

ea4edd9efc6b9bac7085bb0445f64b74f724869d64bba90f542b3c393564f9f9
SHA512

d7e422691abb609250d4e7023ed2d6f998bc2d30e0d12ce335e224d8252f485ec82e42a25bdcda341c8ca5a196a8aff23ee3439a4b62a3a823b90415564ff23e
SSDEEP

1536:GMEj0/TM2w2C1EF+1ppxA5yh24/BIL08Hz/cT6vANgpkjTvPDntdNbuGXz4FBwS8:bDFQzGUs0+Q50QTsCz4jI/lW1BPDVS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ef464addad913da6d3df898125398b7_JaffaCakes118

Files

2ef464addad913da6d3df898125398b7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c6d9df426b8952a1015cf7683bc7baba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

msvcrt

__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
_acmdln
__set_app_type
_except_handler3
_controlfp
exit
_XcptFilter
_exit
??2@YAPAXI@Z
time
srand
rand
_snprintf
__p__fmode

kernel32

GetStartupInfoA
CreateThread
WaitForSingleObject
GetModuleFileNameA
CreateFileA
WriteFile
CloseHandle
GetCurrentDirectoryA
SetCurrentDirectoryA
GetModuleHandleA

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 826B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE