2e103f4f43a716c7aaec8e2a0a2d01a5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e103f4f43a716c7aaec8e2a0a2d01a5_JaffaCakes118
Size

190KB
MD5

2e103f4f43a716c7aaec8e2a0a2d01a5
SHA1

c926d79e8ea9e2afc3205e09f608bb7e8a3f80eb
SHA256

4d353d7050b182a4f63fb7b676bef9e0d7720f807a9a80cc6c100662d3dc1cee
SHA512

e949f8ff15f67d2b5b6ae0f4cdb5588ac1649db3799da6a793766a4a27908d9936c17d701e9cc3ab180004cfa98ff056ae19377f9aec142fff77599ac8f0eade
SSDEEP

3072:9TRbUlnqFipUeJ5Q1NG4VoaaGLGhYxBYAvuZyqFqmca0/RtxKryO:9lanqFipUe8jpoaa/YxB1u7qmcaIRtkr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e103f4f43a716c7aaec8e2a0a2d01a5_JaffaCakes118

Files

2e103f4f43a716c7aaec8e2a0a2d01a5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

72fab56238146e24a239b2eca9e04e9b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmAssociateContext

ole32

GetHGlobalFromILockBytes
CoTaskMemFree
StringFromGUID2

kernel32

SetProcessPriorityBoost
TlsSetValue
InterlockedIncrement
TlsFree
EnumResourceTypesA
ExitProcess
SetLastError
TlsGetValue
GetStdHandle
TlsAlloc
GetLastError

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ