2d872b0a11de937bae402e8c237bc665_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d872b0a11de937bae402e8c237bc665_JaffaCakes118
Size

56KB
MD5

2d872b0a11de937bae402e8c237bc665
SHA1

a5a9cfb8c39e86ed14c41779c138a05e0d2f3fae
SHA256

cd09e8ff6842a48091376d1d2772dda5f8ed304ec56ee86f932a6b150bf8f2a2
SHA512

c0477ce9ad031fbb00ae52cb73b30934fc7cb4999177535178c4c67dfe5d0f8f7204d37118a22994d309a8728c99cb56177abdaf3b0af659f31fa8a0fed73293
SSDEEP

768:gt96TIpa2WA0WYonowJsgLxxc3ykM0teTAZR5nj9bRchLn9Jw/8ln0OmIsCKjsds:W9IVg0JhUER5nTcekVVsCEsk/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d872b0a11de937bae402e8c237bc665_JaffaCakes118

Files

2d872b0a11de937bae402e8c237bc665_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fc3269620d02b090bb061c67a257c7d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCommBreak
OpenWaitableTimerA
SetComPlusPackageInstallStatus
GlobalFlags
ReadFile
ReleaseActCtx
RegisterWowBaseHandlers
UpdateResourceA
GetCurrentActCtx
ReadFileEx
GetStringTypeExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE