2f4063acb3824cee3c1bcc607bf80083_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f4063acb3824cee3c1bcc607bf80083_JaffaCakes118
Size

56KB
MD5

2f4063acb3824cee3c1bcc607bf80083
SHA1

45e752f57b182b01ae97d3e3d1c05095f1de6a4f
SHA256

c9d92c4cd1188e1812d042067bfe3c1f7bc93211341e65976d33b0ffc68589f4
SHA512

6679eb0e02b78a42e7406837e64159b144c031dbb1c5b8415f74ea0e43004be4a7d6d9378b4b80990507c73e708287a440782bd86852356b83177601fba35f8f
SSDEEP

768:4ttZcmM4b71RtNrJzfum6UDO4bMfChEFkHM4cy5mUmyG17SQuEwh7tUq2NtIkhJ2:4t3jNtbkCh8oHcMmUmIQydhxAlNECRG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f4063acb3824cee3c1bcc607bf80083_JaffaCakes118

Files

2f4063acb3824cee3c1bcc607bf80083_JaffaCakes118
.exe windows:4 windows x86 arch:x86

238326ae623d5ff2a9cb7e89b3183721

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileW
HeapSize
FindResourceW
SetCriticalSectionSpinCount
GetSystemDefaultLangID
BindIoCompletionCallback
_lopen
CreateMailslotW
GetNumaProcessorNode
FindFirstVolumeMountPointA
RegisterWaitForInputIdle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE