2d0a2431609cc16d61cb4d77b9765c46_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d0a2431609cc16d61cb4d77b9765c46_JaffaCakes118
Size

27KB
MD5

2d0a2431609cc16d61cb4d77b9765c46
SHA1

efb85709303c650a47a57fb3cfc3a7180cedfbe8
SHA256

09aa48988bdb3552c77d4c370e3d1b7ff55d84f269fc406f247fe7a86b7eb682
SHA512

b8ca5bc7a249f2363b194d727f97cb8e73133f9e22f0da5c29f91364a6ba75223703eeef3d1807ba20f4332fc9db0cc746a9471d4e89807a17814e01ce6df6a4
SSDEEP

768:6Wnq4WBPEKngQ+pOasvlpDeJwFhLFBqgag+:6WnkBPPxDpDWwfDh5+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d0a2431609cc16d61cb4d77b9765c46_JaffaCakes118

Files

2d0a2431609cc16d61cb4d77b9765c46_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7f2e49b54cf3cc086ecfd6567ba729e1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetLastError
GetModuleHandleA
GetModuleHandleExA
GetProcAddress
LoadLibraryA
Sleep
VirtualAlloc

user32

MessageBoxA
SetLastErrorEx

Sections

.text
Size: 768B - Virtual size: 528B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256B - Virtual size: 62B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE