2a0f20a2a0a58828247b38b62089d269_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a0f20a2a0a58828247b38b62089d269_JaffaCakes118
Size

1.6MB
MD5

2a0f20a2a0a58828247b38b62089d269
SHA1

e7f6c1be66b3a330bbac6789196436fd8bb5e3f4
SHA256

c01c3ec8dec24d8bd2e82e32a243218df3c1a4cc1a7298adac1785ff40a101b7
SHA512

44651310dd02d4de40825f54533b2c949e03bde8b71eb1a7a9cadb530b0bddc7730aa63082093f09bd535625570f16e71ad1ca706a82b448e9d6b2ad537bd6e5
SSDEEP

49152:dkHJV4IcHWgV3Kvul+0eQxYGzkJLQsq0EpKDA8Vbjz:qaWg4vX0ZuJpTbDFz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a0f20a2a0a58828247b38b62089d269_JaffaCakes118

Files

2a0f20a2a0a58828247b38b62089d269_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ