2ef768ed9521999851c54c6df0e22fc2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ef768ed9521999851c54c6df0e22fc2_JaffaCakes118
Size

63KB
MD5

2ef768ed9521999851c54c6df0e22fc2
SHA1

a562cbf082747e9282a15dfe64c0b030215f5c9d
SHA256

b6899c509a77eff2719100da00882636fe935c4dee83a66715d73b6126fda18f
SHA512

c526d5a6bbd9fbb106cfc092512be20e75a214abf4aae107d6c02620556322c4251e0fb4aceb3d2736dd9e890d9fe6b0d444d1bc4863456d2ccd0800fb05df74
SSDEEP

1536:Qdg3tpxoFymHfn+6zMlHSqXqoZcxI/i6Npn:73iVZzMlHtncINNV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ef768ed9521999851c54c6df0e22fc2_JaffaCakes118

Files

2ef768ed9521999851c54c6df0e22fc2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58708828d5c31968bd59859804ecde67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetLastError
CreateMutexA
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ