2f7420030d4f8313017ce3e1621a6f4f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f7420030d4f8313017ce3e1621a6f4f_JaffaCakes118
Size

83KB
MD5

2f7420030d4f8313017ce3e1621a6f4f
SHA1

26f9cbd9e5b7923999788b31aacbe2ad09d953ab
SHA256

5a3f90b4a605ae5d928d51551fe9b2f3027226842008767011bd509baf19ca74
SHA512

01c239e423ea1c6ae186bfb9176c6a2ce1c190a5c0be3dac1b1b5f84a14c414353cc9edcb3e60da6c9104652bda5e5b41a3ee7a3b31904baebd110a40716d427
SSDEEP

1536:Hvv/mYwNx29K4hQnRcSTSwGNGIuge/yzPk4eb6jEErxTWDTMqhGKYIZTET8bDQ:HvmYk29KvwwGkbgeAk4eb6jBkMqhGKZg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f7420030d4f8313017ce3e1621a6f4f_JaffaCakes118

Files

2f7420030d4f8313017ce3e1621a6f4f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e162940b4ef0b5390eeb06440a2b9e34

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RaiseException
FindNextVolumeW
GetNumaAvailableMemoryNode
GetConsoleMode
FreeLibrary
DeleteTimerQueueTimer
GetFileAttributesExA
GetProfileStringW
GetConsoleAliasA
GetSystemTimes
LocalUnlock

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE