2b8c0fc91bf2061f5b669c89fc0d49c0_JaffaCakes118 | Triage

Sharing

General

Target

2b8c0fc91bf2061f5b669c89fc0d49c0_JaffaCakes118
Size

291KB
MD5

2b8c0fc91bf2061f5b669c89fc0d49c0
SHA1

dba26fbbd746f9e6b8b4e18952d4ab6c0db0e99c
SHA256

05a0ff1c01ed7e0c7efac6a15b61c7f04af082586b6323effaad1ca55ebe8de8
SHA512

f8fa7c97287a8306af15b34ca785e75428e8ec74965ff9c6a4ca14b00531cb80104fb8907aceb7c5865785dc7e14483dfdba92cb10183f0a6015143b17c983b2
SSDEEP

6144:hfqeCb6NMUSdJhcuY4OvZAOjzDOOapYJ+mTCKagi6Y2jVrmQvIjYq4p:gFb6NMPlY4OvCOjPO9yPTCjgih2jVBII

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b8c0fc91bf2061f5b669c89fc0d49c0_JaffaCakes118

Files

2b8c0fc91bf2061f5b669c89fc0d49c0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

vshtb94w
Size: - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

k5p72e3l
Size: 269KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

m8yj5uwe
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ