2f97c4dbb39e5f4af4ea3588f9a9c6ce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f97c4dbb39e5f4af4ea3588f9a9c6ce_JaffaCakes118
Size

4KB
MD5

2f97c4dbb39e5f4af4ea3588f9a9c6ce
SHA1

cc7e366c77069dbf79893188eb5ac46035f7bf18
SHA256

1e3ddb96b5367ac19fe904665b25720106e13aef1c7b8b3a05b95e35e501e69c
SHA512

6805ac982586244235371901cc1af18079b4d8f7b7c03f79abdd281e884f680f0c78e720b6d7bd8e752ea2a48a637a6fc1f5ea625104d575184cfeb92f8836ea
SSDEEP

48:6D2aiEIcUyiDHsKIVjrWpYnDJ1LbWvtuOX:ovUkjS0DJ1LbWvtuq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f97c4dbb39e5f4af4ea3588f9a9c6ce_JaffaCakes118

Files

2f97c4dbb39e5f4af4ea3588f9a9c6ce_JaffaCakes118
.exe windows:1 windows x86 arch:x86

50423c23c2048f86a40c015168a1f620

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetModuleHandleA
RtlUnwind
WinExec

user32

RegisterClassA
GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
CreateWindowExA
DefWindowProcA

advapi32

RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegSetValueExA

crtdll

__GetMainArgs
exit
raise
signal
strchr

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 8B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 380B - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 896B - Virtual size: 896B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE