2f237238c5cfec9aa6c64fc48c3b392c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f237238c5cfec9aa6c64fc48c3b392c_JaffaCakes118
Size

298KB
MD5

2f237238c5cfec9aa6c64fc48c3b392c
SHA1

20752410ccd61421476f219640cef8d61843c51d
SHA256

89156d2d0598a05726c6dc7997cd0e9da31d9c388b424d5a10c5108bd50bca5f
SHA512

31aa5db15bdf1063faf3b7668f81e5a534e3cf07481e821f740192b8e72a0a46e6d7ba3374df5886eb3581da1be9a7d5d9dea6b9d8ba6583e127d07f45ff6919
SSDEEP

3072:slpe7YPXVomWqLEnCYvcvIXRTy1hmUI0xlOcwuGIvS3oGcFuG9hFoHk148GzMw6h:W7XWvDx8hzNxl85IvSiFxTO8GzMt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f237238c5cfec9aa6c64fc48c3b392c_JaffaCakes118

Files

2f237238c5cfec9aa6c64fc48c3b392c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1c401b959f744f1e1cb48e5faacfced2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
CreateFileA
GetModuleHandleW
GetProcAddress
GetWindowsDirectoryW
lstrcatW
CreateFileW

advapi32

RegCloseKey

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 287KB - Virtual size: 287KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ