2bf0d9d6de575dc9d501bc61ac49648c_JaffaCakes118 | Triage

Sharing

General

Target

2bf0d9d6de575dc9d501bc61ac49648c_JaffaCakes118
Size

185KB
MD5

2bf0d9d6de575dc9d501bc61ac49648c
SHA1

44bca47549704b477ec8e7b369b9eafbb87be4eb
SHA256

cd9dec7d7f854322e22377f8d6ce998369da19316250e60801638b1f04905f09
SHA512

1fee6dea10045a80db10f64a1368ec351d8334b2f391603b25ce70be76bd3deb382c6b8c70a1c377f02874803430477e6d24d9a75f7f344fc6f56a7b2bd5617e
SSDEEP

3072:vFyQdUFBMBhiTgqXGFwVDT8q20CpdNW/chQBGHOufuN/WlUmfrJzB/aSwyoUiADR:vgQdKBMWX2Fy4RaGuufee6mtzRwPUiAV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bf0d9d6de575dc9d501bc61ac49648c_JaffaCakes118

Files

2bf0d9d6de575dc9d501bc61ac49648c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fce7809a30096dee5d325be7178490ba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
ExitProcess
FindResourceA
GetModuleFileNameA
GetThreadContext
GetTickCount
LoadResource
LockResource
ReadProcessMemory
ResumeThread
SetThreadContext
SizeofResource
Sleep
VirtualAlloc
VirtualAllocEx
VirtualFree
WriteProcessMemory

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 178KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE