2bdfcdb08c7bdef838313d16bd8dda37_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bdfcdb08c7bdef838313d16bd8dda37_JaffaCakes118
Size

53KB
MD5

2bdfcdb08c7bdef838313d16bd8dda37
SHA1

4d264879542cefd0379bb332c8613a01bcfaca2a
SHA256

b8729da38d0c7f18338360bccfaf06087a34f3e950dd0f9eaf45bff836617e32
SHA512

cae3f52a2e747e82aa89210683558b6dd9f37ec87988a6d0d76a93c3987aa09da239120b0715851fae53e62fb9f74a7cfb4f4a534bfa00af5bc8a96793a7ce40
SSDEEP

768:6WkpH2r4YBG1+V9pwfOCOZIuGbtXtcFrD5qBeivUAtqj208MgifLCxRpwBaWx:+ov+ELwSuZuFrD5Q3vUD208ZiDgVI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bdfcdb08c7bdef838313d16bd8dda37_JaffaCakes118

Files

2bdfcdb08c7bdef838313d16bd8dda37_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a56f115ee5ef2625bd949acaeec66b76

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

Exports

Exports

LdrProc

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 243B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ