2b7dfec90fe4cc946abb5dea7ccd07c2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b7dfec90fe4cc946abb5dea7ccd07c2_JaffaCakes118
Size

26KB
MD5

2b7dfec90fe4cc946abb5dea7ccd07c2
SHA1

0a700b3dd2123c0cef513280828a6756f553a2ed
SHA256

1b25ad34f63ad2d957148d74530382cb8cdddda92e1cb54ffdf61a6df060a88a
SHA512

f998e2336838023968e26720b52f34ff6ae6555a0ddbd4264c0095de0cd6ffb019ca24cb71362fb84657326ce572a5034fb2121b77aad35b555a20b8cf057786
SSDEEP

384:QHvJTV+296jNECkOs9K+1eGXyT0m4wRTCfxhfB0OqCs2H:QJTx96BiK+1eGXtLwROfxhfB0hC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b7dfec90fe4cc946abb5dea7ccd07c2_JaffaCakes118

Files

2b7dfec90fe4cc946abb5dea7ccd07c2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ff927df9041610851956a3da8805d6dd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
LoadLibraryA
ExitProcess
GetProcAddress

advapi32

AreAllAccessesGranted
AddUsersToEncryptedFile

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ