2c6bbc2f65a65a2083a3fbfbaad93381_JaffaCakes118 | Triage

Sharing

General

Target

2c6bbc2f65a65a2083a3fbfbaad93381_JaffaCakes118
Size

84KB
MD5

2c6bbc2f65a65a2083a3fbfbaad93381
SHA1

1bc3d2296dd46306f29062c18c9eb9ef4591c088
SHA256

7ef7d7fc8cbd9dd37496f4a38acd72bd316dd3dea1700504a43a562c7b461d9b
SHA512

0cdc8d1682fc25395d5e4c7063dfa48134101adbf8eca4b144c7b9cf9573485ab761299d8bd837ea5014331642f11213ded499c340e3e83516d27d5f538ef12a
SSDEEP

384:RZ7Y33ixEzPrq7g9kfNeXNKf9D2BoSnA25nGsAwBMm0VUU9CjkmTfbnDdmQZhi1X:RNerrLkEXMf9iB8ABoSUEj1fbDdJs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c6bbc2f65a65a2083a3fbfbaad93381_JaffaCakes118

Files

2c6bbc2f65a65a2083a3fbfbaad93381_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

krzc5xnw
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

8vmlj7q6
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

n9r2tqiw
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ