2d0988ae5b86801311090ddb113355e8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d0988ae5b86801311090ddb113355e8_JaffaCakes118
Size

128KB
MD5

2d0988ae5b86801311090ddb113355e8
SHA1

323503ff577b501dc1dea256117b2e00164e6c0b
SHA256

daa7d1c798e69e3f91ee1bedbe861658710df32290f2ee7bd5ae844347dd209e
SHA512

8496a97ed9cc1450d9cb434a110600de6cf783bd43d7af71446721b625dba82d13c896b8caab7fdf598af961b8a3759cf9e90bcb0925f1074299b58f12fbf095
SSDEEP

3072:t2szJnuZQ2vBxVwWwNvgFy4CufuX6klnvqT38J7eK5ZbU6f:t2szJuu2vBbLwxb4CufJklvA8AUhU6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d0988ae5b86801311090ddb113355e8_JaffaCakes118

Files

2d0988ae5b86801311090ddb113355e8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3ae8a4a47b46ecb3748b2d7ccaa70cde

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
HeapDestroy
GlobalAlloc
ExitProcess

user32

EnableWindow

comdlg32

ChooseFontA

ole32

CoTaskMemFree

msvcrt

malloc
_except_handler3

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stls
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ