2b61ad9fd18e154d43a98d98edcde893_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b61ad9fd18e154d43a98d98edcde893_JaffaCakes118
Size

106KB
MD5

2b61ad9fd18e154d43a98d98edcde893
SHA1

db80e7667c84850b11cb3590011927366a834cf0
SHA256

daf7032bdad819a956a072f5aaa934f2562b2012c9aabe806019a9160709df12
SHA512

affb05bbf8ce97cf4c883c62763e00764615c74dcecdf12811cfabf6035ebbaf563bac2f9d2b2a2954f97b8fe3165332ca91762993e9ccc4be56b2bbc04a30e2
SSDEEP

1536:VYfkVS35lQeQC7CsT0ttdJFDB7znGceNuwyyotNWkK0D:VokU35uM2+0ttdJR9zGcePyyS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b61ad9fd18e154d43a98d98edcde893_JaffaCakes118

Files

2b61ad9fd18e154d43a98d98edcde893_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2acd1f81567b7063ae6646e6ea5a87bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
Sleep
VirtualAlloc
GetLastError
VirtualFree
ExitProcess

Sections

.text
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 191B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dsfwer
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ