2be62db066754e322db45bbb82e7c3ff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2be62db066754e322db45bbb82e7c3ff_JaffaCakes118
Size

2.3MB
MD5

2be62db066754e322db45bbb82e7c3ff
SHA1

82223c22535a0550498634be42458ecd5ef3abe6
SHA256

e0fb07a03dada3f10159843dcf1f5004e0d0aa9bd56139d2dad5914261e8fc4b
SHA512

32741676eb1ef5fd8ef7f826a2996e65a457f3783449b997e0951072b769689e360dafab151ceda25aa57f3eccd0b669ea1e3cfd2724b38da871235ee1a9d7cf
SSDEEP

49152:OrkyjE30Z2vYdMQ2Ie3wmpQGPznyHQlyffi:WhjBPWRjLQuFlIf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2be62db066754e322db45bbb82e7c3ff_JaffaCakes118

Files

2be62db066754e322db45bbb82e7c3ff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6c8a7618b4b20206b5d6c68362758899

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
SetComputerNameExW
UnmapViewOfFile
OpenFileMappingA
GetCurrentActCtx
VirtualAllocEx

user32

BringWindowToTop
OpenIcon
EnumThreadWindows

tapi32

lineMonitorMedia

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 19.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ