2f7053fa3da7c6c4b991d029a2f6891c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f7053fa3da7c6c4b991d029a2f6891c_JaffaCakes118
Size

63KB
MD5

2f7053fa3da7c6c4b991d029a2f6891c
SHA1

0e7090e9099e57758554e0dd7e40ba56dfe9603a
SHA256

f15e08f68f69210c174e0af37134f3d64dc902e9ae1dee498c819d819d552046
SHA512

4ccd2cea2374f710303027f06ef727d20bef54ebd17af32bc89c30e7ab0cb6a38686d00ca7b599c6e6f7cd470c5ca7277c4039991126c117d1a219cfc84d96fd
SSDEEP

1536:qiH81T3FNZH+Orw3FFaSWRqEvfHBz6XFPxMIVbaqTiUmXy+R2AOgGM:w1T9+Ok3FFaSWRqGfJydIUmXy+IgGM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f7053fa3da7c6c4b991d029a2f6891c_JaffaCakes118

Files

2f7053fa3da7c6c4b991d029a2f6891c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

753f828d5bedb617616cc74d8b9d1629

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemGeoID
BaseQueryModuleData
GetConsoleTitleW
GetThreadTimes
SwitchToThread
FileTimeToDosDateTime
MoveFileWithProgressW
WaitForMultipleObjects
BaseQueryModuleData
AllocateUserPhysicalPages

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE