2cd2749e3631efa3ec8d3985113fb92b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2cd2749e3631efa3ec8d3985113fb92b_JaffaCakes118
Size

529KB
MD5

2cd2749e3631efa3ec8d3985113fb92b
SHA1

672785db1f6727d6b4e4f999f6234c351368fab6
SHA256

8d647851bee5ab636db2c95ae2ad08c7ab01fb1086e309571fae1bca0ccb8c34
SHA512

83c6de7cb08876acee1a8973caf54dcee23c4b87183fecb37f2bc351741233191f255450414d170e48bfaeb9b668b864cc297081c767dae144d14c84470a8c24
SSDEEP

12288:9Vb8L4MtfjkopdqK/QRnp1w9cZJBYP543g4qXf3k:9Vb0BfpdqKoR3wiZJBYG3gbvk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cd2749e3631efa3ec8d3985113fb92b_JaffaCakes118

Files

2cd2749e3631efa3ec8d3985113fb92b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0b16493162f59d36c078253501f87d1b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetDiskFreeSpaceA
EnumCalendarInfoW
SetEvent
GetModuleHandleA
GetConsoleTitleA
FindResourceW
EnumCalendarInfoA
WaitForSingleObject
GetLocaleInfoA
CompareStringA
VirtualAlloc
CreateSemaphoreW
MoveFileExA
GetCurrentThread
LeaveCriticalSection
FindNextFileW

drmv2clt

MakeEscapedURL
LaunchURL
CreateDRMRightsManager
DllUnregisterServer

Sections

.code
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.ADATA
Size: 511KB - Virtual size: 771KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ