2fd1cdcd26e3b6c06784a01879080f88_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fd1cdcd26e3b6c06784a01879080f88_JaffaCakes118
Size

75KB
MD5

2fd1cdcd26e3b6c06784a01879080f88
SHA1

06049b5ebba34f36baa096660976dba336f8d66f
SHA256

df426d70ad484b3f35f899f68a15f552ff7956e031e37e3ef5e789d2f4e8b96a
SHA512

5351f0578f32ec4d58818e7d5280b4be1a4a1ec75ff3a3bb1b97b043b2dff6c9ddcb2e61092a02d3d5b2382690780940f35d61557325910cb8f16ef251726d89
SSDEEP

1536:tt4a6ot9skVKKFJFX09CuYgYNrCx3DPVz+NDhLhqOt7r506V7al0y:tt4ar7R8KFJFX0a/r2DPZK/q035069ap

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fd1cdcd26e3b6c06784a01879080f88_JaffaCakes118

Files

2fd1cdcd26e3b6c06784a01879080f88_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4cb9ef4447d8512a8f95a9ad972b35fe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
ExitProcess
CloseHandle
ReadFile
SetFilePointer
GetFileSize
GetModuleFileNameA
GetModuleHandleA
HeapFree
GetProcessHeap
HeapAlloc
VirtualAlloc
VirtualFree
UnmapViewOfFile
MapViewOfFileEx
CreateFileMappingA
GetProcAddress
LoadLibraryA

user32

RegisterClassA
GetKeyNameTextA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ