2ad0cffb368cbc3d1180a6d785bc57b3_JaffaCakes118 | Triage

Sharing

General

Target

2ad0cffb368cbc3d1180a6d785bc57b3_JaffaCakes118
Size

223KB
MD5

2ad0cffb368cbc3d1180a6d785bc57b3
SHA1

0e48e294b6438012774c9b4ad79da13194b80d2f
SHA256

e1689068f88b6505b5ea37961b2de29a342806811d4a462f658cd3f7713df14c
SHA512

3c462a9d7431a94677c64dd7c0693ab48e2c3ac2b508dd99c2e317bd6987046901155ac5e3af14714131c9557bf9b6e4cb8039d5fb3e61f6f9cb406b5990514f
SSDEEP

6144:kIxRcHU0hCwjWRYuwBiMbua6CJY6y6Ucj9yakf:kMc16RYxBJuThyg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ad0cffb368cbc3d1180a6d785bc57b3_JaffaCakes118

Files

2ad0cffb368cbc3d1180a6d785bc57b3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f7f4ac3920b6d93936d07acc759b224b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetCommandLineA

rpcrt4

RpcStringFreeW

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 179KB - Virtual size: 395KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ