2507f5e73e73e4367df5c95c4354b47a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2507f5e73e73e4367df5c95c4354b47a_JaffaCakes118
Size

106KB
MD5

2507f5e73e73e4367df5c95c4354b47a
SHA1

029f21d3506bae5d0596e81aceafb238f0939289
SHA256

14fe8264a5b02d067b56bbf07646c0f8b87fc13d104bdebd245a747340c23798
SHA512

4dc8378a41798fd0668b6a77b16473de38dcd7d39d0df2aa4c760682fbe665cdc988836f5c0db177f18940f2f0f19df4e330a9c0a8a583e6e7306f1367866cc6
SSDEEP

3072:bTPgNIa85AaSQTA5KUupJ3/8oobNat4aj+xS0:/gN17QTAsUuvSBi4g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2507f5e73e73e4367df5c95c4354b47a_JaffaCakes118

Files

2507f5e73e73e4367df5c95c4354b47a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

866a54bdfb0bac0bd463afc972806c7c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
Sleep
VirtualAlloc
RemoveDirectoryA
VirtualFree
ExitProcess

Sections

.text
Size: 512B - Virtual size: 222B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 201B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dsfwer
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ