2e0a97b6a2e6c2b7a0d100eee3dd8166_JaffaCakes118 | Triage

Sharing

General

Target

2e0a97b6a2e6c2b7a0d100eee3dd8166_JaffaCakes118
Size

19KB
MD5

2e0a97b6a2e6c2b7a0d100eee3dd8166
SHA1

4df874543137e75418f08386efd5576fa305bfa2
SHA256

14075e77842d54f59a18ecbb607d24bfc5672109e9752532a62aa6dcab86f9e9
SHA512

c83195e1dbf21fbff8a5e5a68ffcd1a13e973d10dcc2ad6ef4510aabd2987f0977cbd6c7234b32635effe9c58300505862e582dab9e626fb16d8e50b25beb5c3
SSDEEP

384:cVmg6sMDOdGa2wg04LllVDd6EhaA6jK/0:cVmfscUwlyAK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e0a97b6a2e6c2b7a0d100eee3dd8166_JaffaCakes118

Files

2e0a97b6a2e6c2b7a0d100eee3dd8166_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e1ad2f986ad7f776fd3caffde19f0d01

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
FreeLibrary
GetProcAddress
LoadLibraryA
GetLastError
HeapReAlloc
HeapFree
ExitProcess
FindNextFileA
FindFirstFileA
FindClose
GetProcessHeap
VirtualFree
VirtualAlloc
GetModuleHandleA
GetCommandLineA

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 522B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 562B - Virtual size: 729B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3Cf52
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

NxNlH
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ