2fada408f3a3524e078dc8c01bb337f7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fada408f3a3524e078dc8c01bb337f7_JaffaCakes118
Size

137KB
MD5

2fada408f3a3524e078dc8c01bb337f7
SHA1

428537b4d30910d83d34ef230795095784f9136d
SHA256

0b4aaac4e1055bd1c70244a92abb9315010bb2e2d19334c3c9c9aa5997743ca7
SHA512

d0378bbc5c3f684344ecf1376c043a0cdca3ebed3bd51d331c6a0f5b03bc42b54b468e324e0dd24ee7c9d3fe19a09d70e7bf02c884f3d55c9e0530dd1eec7bae
SSDEEP

3072:1fJUv62uGoN4z7f5OU+0W5K8lCmbDH6RifHx9qKuXcN:1Gi2uGzzjZ+0bvmbDaROIyN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fada408f3a3524e078dc8c01bb337f7_JaffaCakes118

Files

2fada408f3a3524e078dc8c01bb337f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0879751f989d85c88563aa9547a8d3ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
FindResourceExA
GetProcAddress
VirtualAllocEx
WaitForMultipleObjects
GetModuleHandleA
CloseHandle
CreateThread
TerminateProcess
GetCurrentProcess
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetTickCount
HeapFree
HeapAlloc
GetStartupInfoA
GetCommandLineA
ExitProcess
GetProcessHeap

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE