2851f57230c95945999a73cf7d0e5e6c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2851f57230c95945999a73cf7d0e5e6c_JaffaCakes118
Size

763KB
MD5

2851f57230c95945999a73cf7d0e5e6c
SHA1

609b4e9dd037b1798fd0e37b3ad74f664eff60cc
SHA256

8b91c2394c2fba9436e6ffe14516539abf293596ca469b2611b8dace51d92e13
SHA512

59d992c8e583ef2f01b07ad46b0dbbc7ada704a8888abfa5801520b6319ebada23ed1f8c6f2121343210fee1d71f4223c956d02cdc1d222e1ced45169f9eeff2
SSDEEP

12288:jyE7RM8acI7vP957Elxr2bzEym+HFjOPgfPOnSpEaxw6LaeoOn1zbW9i/5Yxdqro:jyE7RIp7vnvEsHz3YyE+w6Lagzb3/VFm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2851f57230c95945999a73cf7d0e5e6c_JaffaCakes118

Files

2851f57230c95945999a73cf7d0e5e6c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aeda7a2d1e3b164b32757c0cf3f6c147

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualProtect
VirtualFree
LoadLibraryA
IsBadReadPtr
HeapFree
FreeLibrary
CloseHandle
CreateProcessA
WriteFile
CreateFileA
Sleep
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 754KB - Virtual size: 754KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE