2b418c0719cf7ca02f460b8a87d7cd14_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b418c0719cf7ca02f460b8a87d7cd14_JaffaCakes118
Size

191KB
MD5

2b418c0719cf7ca02f460b8a87d7cd14
SHA1

e0d9ac1bb41786868afe73edfce92fb076d79dcc
SHA256

4ff92387a0b64c8ce19e65ecf26176b4d42bbb372b7cb6e34ce60c23831c0e1d
SHA512

6e3100c5bf7c9a80989ed897a21e821bac46f542a843d87ba8fde1ec9b4e91176d199fad53169cee206b576a646cbe6c7a29da80bb43424bd7df04d4ac830eee
SSDEEP

3072:hvjUtOh92kK2GUwdXF6ATWEscD84dBO/KvQafl+yGkmy/UbL2pfEKy:ZUtOh92z2ydV6IWEscD8EmKEkmqUH48D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b418c0719cf7ca02f460b8a87d7cd14_JaffaCakes118

Files

2b418c0719cf7ca02f460b8a87d7cd14_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58708828d5c31968bd59859804ecde67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualFree
VirtualAlloc
GetLastError
CreateMutexA
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 157KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ