2fee186f502da5da38f857de56d991c7_JaffaCakes118 | Triage

Sharing

General

Target

2fee186f502da5da38f857de56d991c7_JaffaCakes118
Size

8KB
MD5

2fee186f502da5da38f857de56d991c7
SHA1

76f6cf88a07e97db4ed4a92ae9c1cb4d316c8e2f
SHA256

1ac9d3cdc0e73f82926b8e227666f18b2c87780eed5d86de9ba791889b7de886
SHA512

0478d6b0a87d2451ecbdeb8bd1ecbf2b787e452b4ba89b4e3b737c05feef5f7ca3e65aefdd7b336ef0cee421d43e5c2d1f2bd6c289a4e55d38b3332f6710eb4d
SSDEEP

96:DD715l4s/xpWGF2diNJO24o/ySIMOo2W27279WNUoynYNOtJyg4D601Rqm:14xG0dUO2Jt3BU27wNUoynYgKDXqm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fee186f502da5da38f857de56d991c7_JaffaCakes118

Files

2fee186f502da5da38f857de56d991c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1057f8557c9f87ddba67ab7e3b34dfea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

urlmon

URLDownloadToFileA

user32

CharLowerA

advapi32

RegCloseKey
RegOpenKeyA
RegDeleteKeyA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA

wininet

InternetGetConnectedState

kernel32

LoadLibraryA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetProcAddress
lstrcpyA
GetSystemDirectoryA
lstrlenA
CloseHandle
Process32Next
lstrcmpA
Process32First
CreateToolhelp32Snapshot
SetFileAttributesA
Sleep
WinExec
CopyFileA
DeleteFileA
GetStartupInfoA
lstrcatA

msvcrt

_initterm
__set_app_type
_controlfp
strrchr
exit
_exit
_XcptFilter
_acmdln
__getmainargs
__p__fmode
__setusermatherr
_adjust_fdiv
__p__commode
_except_handler3

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ