2d3ab1f662217d9162b9eb9cd90fba67_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d3ab1f662217d9162b9eb9cd90fba67_JaffaCakes118
Size

244KB
MD5

2d3ab1f662217d9162b9eb9cd90fba67
SHA1

6ef4c5892e572aea3c7a2c8d0465169be851d726
SHA256

e70b1295a986290cc9d97f5a48a9c05c35729e0487cb804a12091e302696ec75
SHA512

aea3c1a0c5b903b6212837693561d3e53a2e2c4a694e8140e8d755a94f52f0f17d9f0a4b4bc62a958499c8971126ce420126833015fd280a451e511b3a00b6a6
SSDEEP

6144:vvnoTH3tIXGg/KR4AgdPKf+oSKs8z/7lfYHF5Pc5C/HyculdJQWgbR:Xno7tsCidPKf+of/7liFKeSBlwWg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d3ab1f662217d9162b9eb9cd90fba67_JaffaCakes118

Files

2d3ab1f662217d9162b9eb9cd90fba67_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5a498eee87e4d89512a84502f500181f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

Sections

CODE
Size: 158KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ncph
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE