2cd99131603f0fbcb43494ddaa6cf9bf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2cd99131603f0fbcb43494ddaa6cf9bf_JaffaCakes118
Size

84KB
MD5

2cd99131603f0fbcb43494ddaa6cf9bf
SHA1

a29af6840f1ed006bda6df6d57e95d8c090b5098
SHA256

23640002eda4957baf241083483e36ba6b743100785e27ed763003e7184a0745
SHA512

8555fe1c45875f59445f6fd433a9a696a0514d2c96302060c16791473090df0491b3a174611ee5d3673e73b5bbf769baf827aa24ebd33009594cdc295511568f
SSDEEP

1536:0uUaC03zq2fhbp1p37uwuD+BeIpVQm+qSy/BmfPOVn/sYHNnakOnbcpyvXWmT8Ll:0NwodKVQm+qSEBmfPg/pDOYuXWySWkW+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cd99131603f0fbcb43494ddaa6cf9bf_JaffaCakes118

Files

2cd99131603f0fbcb43494ddaa6cf9bf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

77af216320e13b70773b8c0724684b19

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
memmove
_CItanh
memcpy
strlen

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
HeapAlloc
HeapFree
HeapReAlloc

user32

CallWindowProcA

Sections

.code
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE