2d25990ccab28e2eb6955188c98560d9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d25990ccab28e2eb6955188c98560d9_JaffaCakes118
Size

79KB
MD5

2d25990ccab28e2eb6955188c98560d9
SHA1

9b6d218cb14325e12c715bf80e0b7c3d8562b191
SHA256

8ffcc35e956d7e26e2e44689b2d94cfbeb093683509fed9cceeb4fab9198b171
SHA512

ee14ec7a5937835ed25fd106e4eb32784d52ba8b2269d7d8e19075e0d102d0c53ea833649082ec6b29be584889a9d5fffabf8ea4ec4b0bc0987308bd6b510f16
SSDEEP

1536:bpRIWj0ZmnB7m7hWo4ToDVuYVG76mbj+aY:bpRTPnBI00DVFG76w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d25990ccab28e2eb6955188c98560d9_JaffaCakes118

Files

2d25990ccab28e2eb6955188c98560d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 63KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE