2c361ac8c260116c981609a58b8a2fb1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c361ac8c260116c981609a58b8a2fb1_JaffaCakes118
Size

241KB
MD5

2c361ac8c260116c981609a58b8a2fb1
SHA1

b64251bb7fecdd9cdb503b7254ea3dd8e8640199
SHA256

0c6f14ac31b6a060e84e65cf078b10f8c4513b830b7a70ad09d342118e180456
SHA512

6f52be5b68ca2426628a62cdc28d7437e5af484e10136bd48a159a36e7cf59ffe59a9b79af3cc769a5c2be81bd48219bf615f073f0c4627b417b685d1ba87e30
SSDEEP

6144:hr0wOz+qneT0mzk5AXWZRbEH4/TyLegSUxvvQGIVU:hr0waneT02KAGZRYYLgZlvQPm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c361ac8c260116c981609a58b8a2fb1_JaffaCakes118

Files

2c361ac8c260116c981609a58b8a2fb1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

171606dec2fd8d191b194ac18c6c2508

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
FileTimeToLocalFileTime
GetFileAttributesW
GetConsoleDisplayMode
GetFileTime
HeapFree
HeapAlloc
GetProcessHeap
RtlUnwind
HeapValidate
IsBadReadPtr
RaiseException
ExitProcess
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetSystemTimeAsFileTime

oleaut32

DispInvoke
CreateErrorInfo
OleSavePictureFile
SafeArrayAllocDescriptorEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

wininet

InternetCloseHandle
InternetOpenUrlW
InternetOpenW
InternetReadFile

Sections

.text
Size: 166KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE