2c038ebec0f716927b49ff118d96259e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c038ebec0f716927b49ff118d96259e_JaffaCakes118
Size

213KB
MD5

2c038ebec0f716927b49ff118d96259e
SHA1

e89f2b72ff7855a6b1a635c8b5f3840c683ed683
SHA256

8dbac0ff6863e091f6d3fd1202471d9553b2f69425d83bb63bc517a06d082742
SHA512

d8836452ba284cd17932331c43d3bfb0065bcedd6cbccacf09161bf5f11ae71e54065f80cf1d4820aaed056aaee666d28d70cc074844cd94ddf3dfe44870de40
SSDEEP

6144:nVCQ/fKw36WxSGm9DNhJwACSzBq+fYtQhH7X7+1T5nvMINsTUi:nsQH130hqQsCr7+lSN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c038ebec0f716927b49ff118d96259e_JaffaCakes118

Files

2c038ebec0f716927b49ff118d96259e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ba58fad6e5a768d882cb0d7171dc21d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
VirtualProtect
LoadLibraryA
GetProcAddress
VirtualAlloc

shlwapi

ColorAdjustLuma

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 201KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 250B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ