2e31aeb0ce8da07163c717f7f9ac23a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e31aeb0ce8da07163c717f7f9ac23a6_JaffaCakes118
Size

16KB
MD5

2e31aeb0ce8da07163c717f7f9ac23a6
SHA1

e868f4f5a338408dcf24e6610f8b05d81f4db226
SHA256

56a2e9319a004a82740be0328bc3c15df691b02332e30cc5451942747880eef1
SHA512

74ec74c52c39451931349ea732501006ab41dde3355881bac1783603c3a0dac1e34d3ab028058a24def72ffe1426da0fd47aaf28a1a0173936193556896fea36
SSDEEP

192:K6yjqB7904cnZHMaUWfeWVo3XvQxKiaeRuLsCejARnAAKMeYbBXeQdG4AEGtpMbD:KAm4cnZHM/yQYPswCKMegXeQoBEGtuD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e31aeb0ce8da07163c717f7f9ac23a6_JaffaCakes118

Files

2e31aeb0ce8da07163c717f7f9ac23a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5bc46e5803a7048db7ee02260df87515

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
FindFirstFileA
FindNextFileA
FindResourceA
GetCurrentProcess
GetLastError
GetProcAddress
GetTickCount
GetVersion
LoadLibraryA
LoadResource
Sleep
VirtualAlloc
VirtualFree

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 390B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 122B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ