2f84b904f32c957e64476ecc1932f198_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f84b904f32c957e64476ecc1932f198_JaffaCakes118
Size

54KB
MD5

2f84b904f32c957e64476ecc1932f198
SHA1

98d1ce229de33b0cbefcc8d587dd8c68882eb1ed
SHA256

7d38174b5b55748dc0b8c13fefb57fb53b67adf84ce576b12d4a365953761d57
SHA512

4904d8c063d60b5b4f226b11a36b96cefc5d3a2e459e3e49224457e8b1a39d6d7a377ebb2343618d1dc66f44ab2de199a19ab2a6e6146a7b0088edf5840326af
SSDEEP

1536:Tf7yChIYGey/TT0dO9ve+EI4UfwpmO7oy:yC3Gj/kdOf4UIgaoy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f84b904f32c957e64476ecc1932f198_JaffaCakes118

Files

2f84b904f32c957e64476ecc1932f198_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7242be8f34d1cbc3397509c398700d8c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
CreateThread
EnumDateFormatsA
ExitProcess
ExitThread
GetFileSize
GetLastError
GetModuleHandleA
GetProcAddress
SetEvent
Sleep
VirtualProtect
WaitForSingleObject

user32

MessageBoxA

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256B - Virtual size: 11B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE