2d7056adc40a0c51879206236461b85d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d7056adc40a0c51879206236461b85d_JaffaCakes118
Size

212KB
MD5

2d7056adc40a0c51879206236461b85d
SHA1

d108d84be43b414d1bbb5b66d8e4f6002fed840d
SHA256

4542cda22d0bb60c9fa1a9703f6e65ec9dc84dfacd4a8f9ea7b636df69fe1ea5
SHA512

1c7d260d19eae79d9fc294c854c32aa2fa595f9bc090eda08e78ac7c613b4d5f60e7f7e1f1a8284e87818acf5e6d4cc96a2809004946b9c48c743f46690b55ff
SSDEEP

6144:FeATTlBwr4B/kPgowNdMFRb+V3MT7cQ/pa7:FHTTLwoV5NdCb+V3s7Tpa7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d7056adc40a0c51879206236461b85d_JaffaCakes118

Files

2d7056adc40a0c51879206236461b85d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c8585a0451d6b9d622ef11294511a9f4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
LoadLibraryA
GetModuleHandleW
CreateFileA
GetModuleHandleA
GetLastError
GetProcAddress

Sections

.text
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ