2e7ba15edd91cd8d04f11030512ac01a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e7ba15edd91cd8d04f11030512ac01a_JaffaCakes118
Size

145KB
MD5

2e7ba15edd91cd8d04f11030512ac01a
SHA1

8eccfb07fc5d6fcee483ef85a126e9decfc1b441
SHA256

74caa8a15a5c9bfb67a2122c1428f8ea1eba500da6ec31534f667608d44394b6
SHA512

9b43736429c4bd51c05d2dfc1f8bf1cfbff6ac13eb7e8df4b6fc88437c7b2eb2a958b2b20dda60322c829d06cd39d9402b6839e65a61b55961c75ce157e545e5
SSDEEP

3072:LwLsblDmzJycOMAwseahGwkQ3WXPvoIZN3lsvCFq76UreMT51M:L1AsIaqnoSRlsa+DffM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e7ba15edd91cd8d04f11030512ac01a_JaffaCakes118

Files

2e7ba15edd91cd8d04f11030512ac01a_JaffaCakes118
.exe windows:1 windows x86 arch:x86

6c7ac28e6a3acabc47b16fa3e5f11ee0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualAlloc
UpdateResourceA
CloseHandle
GetVolumePathNameA
SetFirmwareEnvironmentVariableA
EndUpdateResourceA
VirtualAlloc
OpenFileMappingA
GetCommandLineA
SetLocalPrimaryComputerNameA
VirtualAlloc
SetCommMask
TransactNamedPipe
FindFirstChangeNotificationW

gdi32

AddFontResourceExW

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 84KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ