2c413af33e55d5492a86a265ea889435_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c413af33e55d5492a86a265ea889435_JaffaCakes118
Size

56KB
MD5

2c413af33e55d5492a86a265ea889435
SHA1

a0464ffc6eac735232d18eae1e48a59b71cad586
SHA256

611c3947b9b99ab058dfb93521ea40c26608b4af2c69164b860d10301fbdc10e
SHA512

2a890dabd1915d2bf2599fb290698374a8363b720cb53ed2bec65f9cc7bc161f8f39851f35724934da48eccaf06728688f3287f69b89d530511a74be7d034424
SSDEEP

1536:B4yJwb71CPPYm88KpO5mA407pWQDLxuBSO43:nJzYz8Q8mA4E4wxuQ5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c413af33e55d5492a86a265ea889435_JaffaCakes118

Files

2c413af33e55d5492a86a265ea889435_JaffaCakes118
.exe windows:4 windows x86 arch:x86

56ca34c3ace3747b141e18f0c8aa37f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenEventW
LocalHandle
GetComputerNameW
IsBadHugeWritePtr
CreateJobSet
GlobalAlloc
CreateActCtxA
HeapReAlloc
SetSearchPathMode
FatalAppExitW
EnumSystemCodePagesA
UnlockFile
GetPrivateProfileSectionA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE