2915e1b1f0edab655be90b45ffb4f5b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2915e1b1f0edab655be90b45ffb4f5b8_JaffaCakes118
Size

125KB
MD5

2915e1b1f0edab655be90b45ffb4f5b8
SHA1

e443616516bf3816c9ee401ac16d8f548ef3ef54
SHA256

01f71808826e98d437b13ab65bec5cbc34a6915f05612bdc3c939b90227e2949
SHA512

d849758e93872c5e95158115b1f059b213d663d8c30ce8fdf2078f6b3b3e6030eb0fa7c53f4924ae8cbf072fce00a775e52acff09d313199be1e3252c39bd3e2
SSDEEP

3072:HmZtqsHfzQ+FiK+qvivGcUwRTgF/eG1MDCMWsbK/fupVZf:HmtX7HiKfviOPwKFeG8VK2VJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2915e1b1f0edab655be90b45ffb4f5b8_JaffaCakes118

Files

2915e1b1f0edab655be90b45ffb4f5b8_JaffaCakes118
.exe windows:6 windows x86 arch:x86

6c373ff1aa12f2fe5ac393005052d8f3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
VirtualAllocEx
GetCurrentProcess
SetUnhandledExceptionFilter
SleepEx
GetModuleHandleA
GetTickCount
QueryPerformanceCounter
LocalAlloc
GetCurrentProcess

gdi32

MoveToEx
LineTo
PatBlt
GetDeviceCaps
GetObjectW
MoveToEx
LineTo
MoveToEx
CreateCompatibleDC

user32

SetTimer
LoadIconW
GetDC
SetTimer
GetDlgItem
LockWindowStation
GetSystemMetrics
LoadIconW
DefWindowProcW

Sections

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 105KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ