2e3433f273516e88dbf4a4077d4e402b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e3433f273516e88dbf4a4077d4e402b_JaffaCakes118
Size

368KB
MD5

2e3433f273516e88dbf4a4077d4e402b
SHA1

38ca7174ba8c5bec5a02e2bda37f67ba4f8bba29
SHA256

7768e03ff538818effaa3100b3637743ec71df3d2ef5cebeb2f3e71555f38710
SHA512

a7ac5f5808b4fd9dd67d35bcaca532c9927540fb4ec3d35c5739132ed01f2c94a1b8dbf3ffc2e9a243a49456542786eab2f8287313ba270d10b0ad5f850c0734
SSDEEP

6144:EvQcRAiIWIOspUffJQAKgFvYGJd6KpZV3uTN9WU/G9BGw590VFnzN3/:EbpIOkU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e3433f273516e88dbf4a4077d4e402b_JaffaCakes118

Files

2e3433f273516e88dbf4a4077d4e402b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4570fb5c491a5e3696198d44e54a0a17

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalLock
CreateFileA
ExitProcess
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetTempPathA
GlobalAlloc
GlobalFree
CloseHandle
GlobalUnlock
ReadFile
SetFilePointer
WriteFile
lstrcatA

shell32

ShellExecuteA

Sections

.text
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE