2c6cbc4967ddf1ebdd243fe0a3ab5ca5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c6cbc4967ddf1ebdd243fe0a3ab5ca5_JaffaCakes118
Size

163KB
MD5

2c6cbc4967ddf1ebdd243fe0a3ab5ca5
SHA1

7987e2f38f86f8b2f718a0c40a101171864c9a9a
SHA256

c6813592c918d98406c23baebdabd9379e5941d58c58ebbd42d06169d515317d
SHA512

49294316fe7de73eaa59483e0ab8230688f754aced4a45af341574a517f15e3563a6e1399e6af6831d7bdbb80d723b8b8edbdbf72d0b8ec7a29ad383843ec6e6
SSDEEP

3072:mKC5KHB6Clwse5a0wDOr1Y6wjEBP2wHkHEymTH:nC66awsege1oER2YkHXmTH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c6cbc4967ddf1ebdd243fe0a3ab5ca5_JaffaCakes118

Files

2c6cbc4967ddf1ebdd243fe0a3ab5ca5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c33b295748728d833be275fd5b0f8488

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PrivCopyFileExW
MapViewOfFile
GetProcessId
CreateFileMappingA
EnumResourceTypesA
ExitProcess
DeleteAtom
AddAtomW
ProcessIdToSessionId

oleacc

LresultFromObject

user32

GetUpdateRgn
GetWindowInfo
CreateWindowExW
EndDialog

Sections

.text
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ