2d6deafe88663ba59acbe186421b4d3a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d6deafe88663ba59acbe186421b4d3a_JaffaCakes118
Size

336KB
MD5

2d6deafe88663ba59acbe186421b4d3a
SHA1

30f876bb969812dc08cec681656b2cb18c9a376b
SHA256

02b6b75f6db2284b9f090159d65e6de28d7c8e8f6d3b3222bdba6ef1c61ad7c0
SHA512

9fca77b6261b2e69eae29e46b8c5276ce6ffbe978a72bb302dcd15579f6a8da7b32c9efe3a23d172ccf5afe715b929f631e2702721418e41025b5d37922fb771
SSDEEP

6144:Ffv0SdFDbvTvyFKAkO1yNnzo0Z5CAmoNBDVlRBn0iaUPyLh70j:tH5T2FKATAJo0Z5CAbNrLJ0/U2h70j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d6deafe88663ba59acbe186421b4d3a_JaffaCakes118

Files

2d6deafe88663ba59acbe186421b4d3a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4644a3a6a6a9203e9f7a5d6738317176

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
VirtualFree
ExitProcess
UnmapViewOfFile
lstrlenA
GetLastError
GetModuleHandleA
CloseHandle
GetProcAddress

user32

wsprintfA

ole32

CoUninitialize

avifil32

AVIStreamCreate

crypt32

PFXVerifyPassword

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 641KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 200KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ