2da31651702898bcc92a3577c23c37e5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2da31651702898bcc92a3577c23c37e5_JaffaCakes118
Size

7KB
MD5

2da31651702898bcc92a3577c23c37e5
SHA1

23f95682dd28e29be93f04005377f48bd165a08b
SHA256

af546d225fcecf971cd64f8917227788ab402376cdac187d76ee3a97d04c3403
SHA512

d2ea8c1dff35a6ffcba6582a4c09669398aab84270181b72ce20c018ab01d46c98289564381f315cf13f9e3fa93cec7d455debd78bba3f1e1f6803ba392e7fbb
SSDEEP

96:nP07+ZwR8wlafFb7hY1Yod47y19KNc+w/8S/iZkU5/xaQ:nc7TplazY1Yod4ccD287kG/kQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2da31651702898bcc92a3577c23c37e5_JaffaCakes118

Files

2da31651702898bcc92a3577c23c37e5_JaffaCakes118
.exe windows:1 windows x86 arch:x86

3b40f73de7018e753a4609fb6919985b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

CreateFileA
CloseHandle
ExitProcess
GetFileSize
GetThreadContext
CreateProcessA
ReadProcessMemory
ResumeThread
SetFileAttributesA
Sleep
VirtualAlloc
VirtualFree
WriteProcessMemory
ReadFile

user32

MessageBoxA

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ