2bc543b0fa344fa8bd433c8b81362d0a_JaffaCakes118 | Triage

Sharing

General

Target

2bc543b0fa344fa8bd433c8b81362d0a_JaffaCakes118
Size

29KB
MD5

2bc543b0fa344fa8bd433c8b81362d0a
SHA1

9d414c258c13e7c79d54db721f2270cae95656e4
SHA256

b0c02b685231e1047aca710b6dc8af7552d8fb8bb78a1c00203fd4b815296454
SHA512

684b60b9b57bd70248facf88b860e7fdd9df93317638b80e999851fa53259f7c22a23721b6c9e5e02abe380506f9992d092a553beee2a81a715b22ac0f27c106
SSDEEP

768:Xi8hO4Umjdb9dPEOtAGo4lnZDJnm4cX91/5bDlg0aKb30CWIOCbV7T:y844UcB9EOtAGo4lnZ1nm4cX91/9qKbP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bc543b0fa344fa8bd433c8b81362d0a_JaffaCakes118

Files

2bc543b0fa344fa8bd433c8b81362d0a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5a853afca4077fe46cf55ba745a718a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
Sleep
HeapCreate
HeapAlloc
GetProcessHeap
QueryPerformanceCounter
CloseHandle
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE