2bd2fbd10d3fae7eefd18097f43ec4ce_JaffaCakes118 | Triage

Sharing

General

Target

2bd2fbd10d3fae7eefd18097f43ec4ce_JaffaCakes118
Size

284KB
MD5

2bd2fbd10d3fae7eefd18097f43ec4ce
SHA1

2ff8af2a784b18c7631bd0bce257223398c6af34
SHA256

fdd87a4289aeb9219b93a66fc1a873ddc52104acfd659361f7bed1aac7c3b2b9
SHA512

0495c1f049d77563cc33a60f6d71c700eb44f8b35433b46e785c6d41f86e73b2e435eba885ec7e894fd1c84983c1e75475ef248f2c1cf86a7ca4231a67de8cf2
SSDEEP

6144:OeHecZ0R/4xB8mXU0BESGpKjHqqNoST2orKblDk7drC/FI:7e7/4xualqStdT2or8lA7pC/FI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bd2fbd10d3fae7eefd18097f43ec4ce_JaffaCakes118

Files

2bd2fbd10d3fae7eefd18097f43ec4ce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

acd9fa3a74cc4c1d92998e6ad62eeb8f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
FreeLibrary
LoadLibraryA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 269KB - Virtual size: 269KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE