2e415dc36335d64bd56ec06e3d4e189c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e415dc36335d64bd56ec06e3d4e189c_JaffaCakes118
Size

1.0MB
MD5

2e415dc36335d64bd56ec06e3d4e189c
SHA1

4b59fab3af40fd4ba22ff1852d528cbae8e271a5
SHA256

516cb333566d9db165dc18025b93c551c1169d0edaf97b028e65d4817d28860b
SHA512

7aada8f4fadd92a223662772e28297bc9c6d2f7ba2db36236f12d120aba53bcac20d1b9b0c120d9addb10420942f4f0785ba5454026b0b9115077e7913b08211
SSDEEP

24576:CaZ4vSBQ3KMrl9QQhwuwsA6UmZ5+7302nbuS:CauF6MrlDwuvA0A73D1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e415dc36335d64bd56ec06e3d4e189c_JaffaCakes118

Files

2e415dc36335d64bd56ec06e3d4e189c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

78c5182962cee8ca85401ca6b576882b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalSize
GetCommandLineW
VirtualProtectEx
GlobalHandle
GlobalAlloc
GlobalFlags
GlobalFix

user32

DrawEdge
CheckMenuRadioItem

Exports

Exports

Qiovist
ReadAnifytkgx

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1012KB - Virtual size: 1016KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ