2b6dabd54f485c4b23f6f3feb235ddad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b6dabd54f485c4b23f6f3feb235ddad_JaffaCakes118
Size

8.7MB
MD5

2b6dabd54f485c4b23f6f3feb235ddad
SHA1

2b1f057ad30494d008fb3169889de8c44f73fc2c
SHA256

478539f7b6ab97b6e3840eb35af1c3378ea0388af66dd7555a7cf5491ec931b3
SHA512

6c60dc6ee9beece90013b75a54650caa218ed63ad1781fdc5ff135a39172138cfeb4b5626285350495e3d0a3fde5695cdd780e54de2f82db4fcd6bcceece654a
SSDEEP

196608:K0/Ni/vjRIrHeXueGNVUFgTsOVV5LxZ65/qj2/TlJsaR+crDbFHJ5F:PNyvjRIrHeXueGNVUqThVVtxsij2r4Vi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b6dabd54f485c4b23f6f3feb235ddad_JaffaCakes118

Files

2b6dabd54f485c4b23f6f3feb235ddad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3e9608e4dc0e096f5827d0a697a9899a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
lstrcatA
CloseHandle
CreateFileA
ExitProcess
FreeLibrary
GetProcAddress
GetTempPathA
LoadLibraryA
ReadFile
SetFilePointer
WriteFile

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ