2fe3e8beefb797a532ac09826153fa78_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fe3e8beefb797a532ac09826153fa78_JaffaCakes118
Size

522KB
MD5

2fe3e8beefb797a532ac09826153fa78
SHA1

664c6c8d77a58895331416e6186cecb54affd0cf
SHA256

b1481939341c445f5d05a948903d7214c558515b470b2084c08b389828b7a339
SHA512

606e06ce534128071643b0940f27dabd0589da621e3f0f3f568cc78daf4bd8ce1033e1537e55508090bc62f37c6acf990be40290820b4a9ad5e3073ae7ed641b
SSDEEP

12288:/x0042aVlMlaPX0ffmNlUHgtSKsSHY6IN1:J0042aXw+UAEJM8N1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fe3e8beefb797a532ac09826153fa78_JaffaCakes118

Files

2fe3e8beefb797a532ac09826153fa78_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.data
Size: - Virtual size: 280KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 165KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE