2ef47116322b58f0486a69030d4b130c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ef47116322b58f0486a69030d4b130c_JaffaCakes118
Size

185KB
MD5

2ef47116322b58f0486a69030d4b130c
SHA1

a45cd5b0468fb4eba5ec279a664a755568ee121b
SHA256

b724c0d9d8cac25ea69dc71b6666863e52b6e442370077b2d4401f6876c4c000
SHA512

6bc4a8b014df0f363270e7876fa083a252b939a4e2a500c04af38840e42c162220c73068d6bef042d23bfb4c4b6d2430a9011fc56b6d82acd3c29c1a50502846
SSDEEP

3072:gmriEyqvfy0/HNq5FycNsGdmykUBqtpn3dteT/BDly5u:priEW0/HRqwyk42pnti/BBx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ef47116322b58f0486a69030d4b130c_JaffaCakes118

Files

2ef47116322b58f0486a69030d4b130c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1bc0c7c8186376adddeca09bc2b0ab4a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
memcpy
strlen

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
CloseHandle
InitializeCriticalSection
HeapAlloc
WriteFile
HeapFree
CreateFileA
GetFileSize
HeapReAlloc

user32

CallWindowProcA

Sections

.code
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ