2f87275a4e9a52519ca13f6f2f854616_JaffaCakes118 | Triage

Sharing

General

Target

2f87275a4e9a52519ca13f6f2f854616_JaffaCakes118
Size

37KB
MD5

2f87275a4e9a52519ca13f6f2f854616
SHA1

16dcc7a907d4719033ec6424e638b4d93b80ab56
SHA256

ac63e2c53af28e39da3ca62ca3fd3de01604a7eab8936a25f244b1f18e4003f2
SHA512

945ed2e168dec0c4ce8fa3b6888b2b3970690572f392178a82ee468bfac54adbbbe2cd074df7cf8233a90c4589f7c4c05123e01dcefbfb7f2d9c9ebe0a858187
SSDEEP

768:iZK2TX9rkZvyDkjsF53lFSF93dj1ATUW1S6yT+6z6Uk8hSNwAlEhCXjfItEKKf:SpzmSXlEFnjYpS6y6a6/8hAlEMXLIm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f87275a4e9a52519ca13f6f2f854616_JaffaCakes118

Files

2f87275a4e9a52519ca13f6f2f854616_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c0f64b44ca0c850acd079ea96228ffb7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
CloseHandle
ReadFile
SetFilePointer
GetCPInfo
GetFileSize
GetModuleFileNameA
GetModuleHandleA
HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualFree
UnmapViewOfFile
MapViewOfFileEx
GetProcAddress
LoadLibraryA
CreateFileMappingA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ