JaffaCakes118_e2af785139325459467e6e7ed21bb763 | Triage

Sharing

General

Target

JaffaCakes118_e2af785139325459467e6e7ed21bb763
Size

85KB
MD5

e2af785139325459467e6e7ed21bb763
SHA1

3905109c3643177b1ac3cbdba1c8d333b612ee47
SHA256

228b1a7e7b89d718728e445bab34646f22c5420e64534c9b9d8315d30dd073e4
SHA512

7618d1df0e00dbb8f4778f49b91395c4fb32a5d65fb68d26c38429b20cfdaa3eaab64ac845f6704023a14f64d1a2739f753b3a9d68ce43ab4f854008bf0a456f
SSDEEP

1536:K5/N+P/PeCIGOkuADm7ol/A21fkuuD10Pd2gMCb3lX8kdx9YKmsRJ:KL+faqnDuolnBkfDCNb3lBxif0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_e2af785139325459467e6e7ed21bb763

Files

JaffaCakes118_e2af785139325459467e6e7ed21bb763
.exe windows:5 windows x86 arch:x86

f62bb2d2fdf17551a35a2f032d71259b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__getmainargs
_except_handler3
cos
_get_osfhandle
__setusermatherr
_exit
wcsncmp
__p__commode
__lc_codepage
_acmdln
__set_app_type
_XcptFilter
free
__p__fmode
malloc
exit
_adjust_fdiv
_initterm

kernel32

RemoveDirectoryA
GetModuleHandleW
VirtualProtect
GetStartupInfoA
Sleep

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ