2bc982d7ed5b1c6725b1cbffad3190dc_JaffaCakes118 | Triage

Sharing

General

Target

2bc982d7ed5b1c6725b1cbffad3190dc_JaffaCakes118
Size

16KB
MD5

2bc982d7ed5b1c6725b1cbffad3190dc
SHA1

e61e88c91bb9b0622ac026a97f1e331bc187562f
SHA256

9d054e2f45ca87654fa2d80fa981cc179e83eb84e69d4e5ea9273aa2d1d3027e
SHA512

758bb5220f854618eceabd7c30edaa2da7d0029e9350a94aebb78032976e9f20889b32e98c78539f03e958b2a242ab986bd5b65b4b88e48eb6dc7ff261f7c7e1
SSDEEP

384:sOPHoOOYwh+cEiRf0ueKSbqlojn7rJv5g7LaFYUs5HzGcd2n0:smIOMh+5iR6K2qEnfJ5gHaFYHTjdM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bc982d7ed5b1c6725b1cbffad3190dc_JaffaCakes118

Files

2bc982d7ed5b1c6725b1cbffad3190dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9d870915cd3d95b0df885669e5e74306

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetModuleFileNameW
GetModuleHandleA
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetTickCount

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ