2c8d800d60ced4af61c2945876b82e0d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c8d800d60ced4af61c2945876b82e0d_JaffaCakes118
Size

348KB
MD5

2c8d800d60ced4af61c2945876b82e0d
SHA1

eee328d8b4ada94f7667257be98101ea3ce61d61
SHA256

5c3aab8abcb6f62c9c5834e1b77430c19aa75a02b837ecd852b18ad8c6c0d892
SHA512

e6965987e12fe4913b0e99bb3608a682e7307cac448a08558ead94ca15572c2a87eacf6e04bdb3423058b681a1707fb13f90b3694e966f5520ea72a89e2031ba
SSDEEP

6144:K6RGXEBA1vGQZQUdwSKdK8tvACRgaZBq72i4C8s5FyYBav2AklNo/Pd:K6RGUBGOnUdiNlgaZYZ4C8IXvAkl+t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c8d800d60ced4af61c2945876b82e0d_JaffaCakes118

Files

2c8d800d60ced4af61c2945876b82e0d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4710e694cbc904bbde58b1960e1a3f6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
SetEnvironmentVariableW
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetFileSizeEx
GetProcAddress
LoadLibraryW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 16.0MB

.idata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 772B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ