2ef4714dd7b05cf096886314ad9fe7cf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ef4714dd7b05cf096886314ad9fe7cf_JaffaCakes118
Size

56KB
MD5

2ef4714dd7b05cf096886314ad9fe7cf
SHA1

14a702b944928a4ebba2620e06c95cb8f9573e5d
SHA256

de9250c1b9a183ad87f6b61bbaa1946a51b190214cbca81b86867379976820d2
SHA512

93f6e3dbedf2b74ba9669704cfeeacbd6f2c98e1aeff2460d50d688a99a5edd2761f653d469224b1f7aa7f6a55ef6dfc9afa9a48e7efa442c0db273fd440b804
SSDEEP

768:E1GuQBn7OZgTvp6sdnqlf1JamoANgEmhWNPF/UH1Nwy2/8Z5GIFSLnXHBj8QsjQf:EWoWWJ+QM5GI6nXhuj9qkFERT4jad

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ef4714dd7b05cf096886314ad9fe7cf_JaffaCakes118

Files

2ef4714dd7b05cf096886314ad9fe7cf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4f076ff4ceb3be6f3e2722b7da641aa9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeVirtualBuffer
SetConsoleHardwareState
BuildCommDCBAndTimeoutsA
CopyFileExW
SetCurrentDirectoryW
GetConsoleCP
FlushFileBuffers
SetCommConfig
WaitCommEvent
ReadFileEx
Toolhelp32ReadProcessMemory

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE