2f7b3ae6016bd68b199a2e51fa89e414_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f7b3ae6016bd68b199a2e51fa89e414_JaffaCakes118
Size

111KB
MD5

2f7b3ae6016bd68b199a2e51fa89e414
SHA1

0c93f671c759f61cd245030ecd0f6fac7ec023a1
SHA256

e4af9e8c74a5056856c6de25aaf6c98ef042af116273198f687f713b4e571e83
SHA512

bdfff8e49443bb32137a9179b326d3f40a1c23c4be681b7cac420f0723b8d9255961754221f8b59a476533c95fc9ceb78eb1a8a9708813dee6d379caa92066fa
SSDEEP

1536:gqyMZKDKfEngEsBmnYnHsHpXy/a+WVeK3EH/pfVpjVrs2ryrd1vUQuqL4mn0V/Xp:g5D6hNBSC/a+kVEVVHs2qH2k54

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f7b3ae6016bd68b199a2e51fa89e414_JaffaCakes118

Files

2f7b3ae6016bd68b199a2e51fa89e414_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8c49953c8ee7bb34527169fb767273be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapDestroy
RegisterWaitForSingleObjectEx
ReleaseMutex
GetStringTypeExW
GetProfileIntA
SetConsoleWindowInfo
CopyFileExA
SetConsoleNumberOfCommandsA
FindFirstFileW
GetPrivateProfileStructW
IsValidLanguageGroup

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 55KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE