2a7301be6569c64249613af9d40f8d27_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a7301be6569c64249613af9d40f8d27_JaffaCakes118
Size

910KB
MD5

2a7301be6569c64249613af9d40f8d27
SHA1

defe02f614aa11ae33a9b4c855df1f07819ab81c
SHA256

d58f712834bdd3d23d63143397bd7b6ce0ab663e486d172509c500239d3a0dbb
SHA512

ee0da505a03df688aef5517c964b64173deaf83be948f2fd88f68e64c5bfe7c9d91cd43dbe03f3fdc26d54c3ebdd24517f7d6b4393513ce55723100db149290b
SSDEEP

24576:a0r6CSHU4ag2Yc41+i/YrcNshpBZxh92:asvVfa/1D/YrcNshbZ392

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a7301be6569c64249613af9d40f8d27_JaffaCakes118

Files

2a7301be6569c64249613af9d40f8d27_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d5f2d8849813a4009dd8b330de1b3bde

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

DefWindowProcA

oleaut32

VariantChangeTypeEx

Sections

Size: 722KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 186KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE