2f4539d7268a4ea544582fb840c4a987_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f4539d7268a4ea544582fb840c4a987_JaffaCakes118
Size

40KB
MD5

2f4539d7268a4ea544582fb840c4a987
SHA1

128f23bba6946e29391edb6755bf07d4ea661d0c
SHA256

dd4bbe6c7f67ddcdc910ea7b45299b5bd54fc46173e2aaea2fa63e256e5b5d3a
SHA512

e6f84fb2383d0c7c4b3dc9716d12a40bc8dffbb049c841994d62bb27b2447735792e8ad17f07808f2094f3f8f39b394410205b76454cbf746a6f8f2f95b47900
SSDEEP

768:Bzam/rkLWTu260C9aA1V1iY198rGOiaueUG9G9YE9aGkHiQGlw43:N7A460ix8rG5aXUGeYEv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f4539d7268a4ea544582fb840c4a987_JaffaCakes118

Files

2f4539d7268a4ea544582fb840c4a987_JaffaCakes118
.exe windows:4 windows x86 arch:x86

83e0fc697fe7689e729e6d8dc32e1481

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLCID
MoveFileExA
SetFileTime
VirtualAlloc
GetModuleFileNameA
VirtualProtect
WriteFile
lstrcatA
GetLastError
GetFileTime
ExitProcess
CreateFileA
VirtualFree
CloseHandle

advapi32

RegQueryValueExA
RegDeleteValueA
RegCreateKeyExA
RegCloseKey
RegSetValueExA

shell32

SHGetFolderPathA

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 630B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 820B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE