2f84b45ef88d0fa3314448fe917f1a68_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f84b45ef88d0fa3314448fe917f1a68_JaffaCakes118
Size

48KB
MD5

2f84b45ef88d0fa3314448fe917f1a68
SHA1

9c9d404284ab46d4de9e4049f4ca53a8367b2da8
SHA256

17ff90336f7a91933a953da0e25e3bf6aef0ad020bb0941dfec5d2e363a726ab
SHA512

07b72c5bee21af0103eebb47e43c3165886051456c3f21932ea479f020e5abba87c05fd7a4d6e83afdd306eb24e74de2712ec65090e7f4b208b986db08a9b109
SSDEEP

768:UbXxkbODzGfnuD7brh7rJo4dfjYcN9qsO1wfPsZXjGK/e9OnPL:Urxk+zGfuD7bdBo4dfBW10Idm4PL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f84b45ef88d0fa3314448fe917f1a68_JaffaCakes118

Files

2f84b45ef88d0fa3314448fe917f1a68_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5e28b6c2f98e135573d10bc56073e967

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CloseHandle
GetProcAddress
GetModuleHandleA
LoadLibraryA
GetStringTypeA
LCMapStringW
HeapAlloc
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
GetStringTypeW

user32

MessageBoxA

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE