2f2cc32a4a47f257f18a0f8287dcf77b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f2cc32a4a47f257f18a0f8287dcf77b_JaffaCakes118
Size

76KB
MD5

2f2cc32a4a47f257f18a0f8287dcf77b
SHA1

56df37fe221872e48d8d1500ddb461fbbcfbfbb8
SHA256

04fecbd085995fe515f5238f0966493c695eaece4819e66675c60781eaf848be
SHA512

be2a440b5d44b93881fdf317c8a86eab27bc147f4ac40c1778087c48fd51874fe674b57ab6e1fea6574ecb25bb38c418882d93895c3c0986b8eba283d43785c1
SSDEEP

1536:I9aSksO3i6uOb7SL/0GO/yZa78JemIAdPQ:dhpy63HSruGsm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f2cc32a4a47f257f18a0f8287dcf77b_JaffaCakes118

Files

2f2cc32a4a47f257f18a0f8287dcf77b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e1bba10fa4d80a375ac91b52b3042559

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetLastError
DeleteFileA
CloseHandle
LoadLibraryA
VirtualFree
TerminateThread
GetTickCount
GetProcAddress
VirtualAlloc
ResetEvent
RtlUnwind
HeapAlloc
HeapFree
HeapReAlloc

user32

MessageBoxA
SetFocus
GetDesktopWindow

Exports

Exports

?XMLPARSE@@YAKK@Z

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.xcode
Size: 4KB - Virtual size: 399B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ