2e1998308ee892a082ccc3da341dc66d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e1998308ee892a082ccc3da341dc66d_JaffaCakes118
Size

9KB
MD5

2e1998308ee892a082ccc3da341dc66d
SHA1

488dee42acbc8bf4488f3be749b99d21aa028207
SHA256

1d836599fcabe3d45547d1cc592c632351166e1063f66660e0ecb012cae7acf6
SHA512

740f398d5c6358ba9a0699753b613362cfb46e482d715de9adf1a42a2856478587137c06b6d6de6433dcc206f7e81d078a07aa033f4bab42cbf9a0bf6f6628bd
SSDEEP

192:8DhCH+gfb8SEp/2ZoDvK+OfrQRuMijEX:8Dhdgfbo+ZorK1QRS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e1998308ee892a082ccc3da341dc66d_JaffaCakes118

Files

2e1998308ee892a082ccc3da341dc66d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ac87c749de041d050a4ac16a115a8cff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
GlobalAlloc
ReadFile
CreateFileA

Sections

.text
Size: 1024B - Virtual size: 582B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 174B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ