2d333616f858d92b47dd636e7b27030b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d333616f858d92b47dd636e7b27030b_JaffaCakes118
Size

62KB
MD5

2d333616f858d92b47dd636e7b27030b
SHA1

6a70cd607f5812bbbd3a41863b072eab88e14c53
SHA256

75493fb9d3fb56b737f201812ddb632745bc999f657cfe8306ea2fbcb7ee7039
SHA512

683399f676a98b31196b52ec7ea40b539110348d930533e7a6d65b8cbac6bdbfc0553e07ea3ce8180f6dc955ea31d38fab740eb2081f9f986432819d00f58c7d
SSDEEP

1536:Dfql1WVjpUZtvchB/7AwfC9QMwMOh1I2Inowu:DfIy6tEhBTVfyQMwjzI2Ins

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d333616f858d92b47dd636e7b27030b_JaffaCakes118

Files

2d333616f858d92b47dd636e7b27030b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9de30f7582d9c1f3e4dcd53593849dec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemGeoID
EndUpdateResourceW
IsDBCSLeadByteEx
NlsGetCacheUpdateCount
GetSystemWow64DirectoryA
SetDefaultCommConfigW
lstrcpynW
CreateHardLinkA
lstrcpynA
UnhandledExceptionFilter
FreeVirtualBuffer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE