2a49260cfaa171d7973af250da425332_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a49260cfaa171d7973af250da425332_JaffaCakes118
Size

138KB
MD5

2a49260cfaa171d7973af250da425332
SHA1

6389c50015f643eaf5f9a55b419ccd161741df8c
SHA256

b6be572d6e5728b717da033f2c3aa854d0698ba2e9a7481ffa2fe3e08fc66792
SHA512

b77c9008fda564a926b6cac01f005ea82adc200ecf36291fae870edee88bb0098c5bd380e7a688bf17bc79ac14689cf30dc98306f8eb505955c3d8df75e0dd4f
SSDEEP

3072:MaHvBo3eNsPmRKnHAUVKtV8HXjrK9ZeFrvJTd1o:7vBo3QemRKgUViGjriwZvfS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a49260cfaa171d7973af250da425332_JaffaCakes118

Files

2a49260cfaa171d7973af250da425332_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b8708e09cc933b4944c259d91619ecc7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
GetModuleHandleA
GetCurrentDirectoryA

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ