2feac906cddecdf7944d4b4921fb37e2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2feac906cddecdf7944d4b4921fb37e2_JaffaCakes118
Size

242KB
MD5

2feac906cddecdf7944d4b4921fb37e2
SHA1

4b577537d764b106310f0689a2731fd013b72908
SHA256

07feadf94db5d9d7e424c33ff659582d9ab426bb3e11a9816a97cc32406a7c3b
SHA512

184d4a12639387ea1f0b4d8b2d0047135fef55d51ef408c24ac62c4b091edb45ee9e288502daaf5d1c9b87b42cc8c8e078514a04170dc7d631fe9270cdae2a29
SSDEEP

6144:1/NsVdjetHSMkw5T63KRmGNEpOrxDNIImRR3GYaOZQY:d6ySbemw3N+hF9Z9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2feac906cddecdf7944d4b4921fb37e2_JaffaCakes118

Files

2feac906cddecdf7944d4b4921fb37e2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 730B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 238KB - Virtual size: 237KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE