2887d8aed82f92b1be5828834cdb2b77_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2887d8aed82f92b1be5828834cdb2b77_JaffaCakes118
Size

17KB
MD5

2887d8aed82f92b1be5828834cdb2b77
SHA1

dc18776d1a22dcb6d2f934a4aac047648eb7565d
SHA256

bc1164fd18767a571de03b7eddb51bf33bcd5802ec431b7c8aa15255fe18689c
SHA512

2f9c3679cff50e1d7f93bfc66a21e385f434d82f54a36c86e8d12220db03905626daa48fac8c6e5fa007fc51f76a0e9619ba11ce58b191e725cfec835280c509
SSDEEP

384:NIlmSEHeSfousgY4hqvGUI8NPLfV12uIHgRQX4reu1LD:ulmh5sgTqvGUIyT7LIAOX4rd3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2887d8aed82f92b1be5828834cdb2b77_JaffaCakes118

Files

2887d8aed82f92b1be5828834cdb2b77_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f050392adbc19888024261f2602e82d9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetCurrentThreadId
VirtualAlloc

msvcrt

cos
sin

ole32

CoInitialize

user32

CreateCursor
CreateIcon
CreateMenu
DeleteMenu
DispatchMessageA
DragObject
MessageBoxA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 50B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ