2cf179cea90e1cc4cb6d30f2c851ede8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2cf179cea90e1cc4cb6d30f2c851ede8_JaffaCakes118
Size

2.3MB
MD5

2cf179cea90e1cc4cb6d30f2c851ede8
SHA1

1c08116c2e5ba6314968940feebf653f40d4d766
SHA256

9d4b03f63cbf74de0edc2d387a689f5e8e7984fabb1321c9f2498a299eb328a3
SHA512

3ceb8eff726f98a5b4dbbcf62d7679f688b6d28d9002f3a7e061c5e42654f9e05c13cb91b3b97dde4b45636bb7782d4bb6f91dec9c282f9704e479078bca8346
SSDEEP

49152:SxEkQGGIZVUjqUo/KbEsIvlFiRR9T0H+vIqWGNI+zkHj3Br0:SxrQcDfUi8ZIviRR9TFIgI+zkLBr0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cf179cea90e1cc4cb6d30f2c851ede8_JaffaCakes118

Files

2cf179cea90e1cc4cb6d30f2c851ede8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4c0d3202854a061a3672d84200493121

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
LoadLibraryA
ExitProcess
GetProcAddress

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 778B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ