2a2b4f5241e39e27903e8861b793febb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a2b4f5241e39e27903e8861b793febb_JaffaCakes118
Size

118KB
MD5

2a2b4f5241e39e27903e8861b793febb
SHA1

e875a6821136bddbcc56aeee9651070dcaa2cf05
SHA256

a04fc160b41d4b58c6a3117d7b5b49900e81f279956a0f8bcd8712d172f7b1ab
SHA512

4167e5b04b9d9d16df19d5039a7769a4a185609360f53b6d729d3e15ad4cc9f41f38e1441716bbc265ae4d61504e7a5432b8101c1c44f4814574e5ec8de9b25d
SSDEEP

1536:CFnYP3JDrZ+bDgvnnfMF/15GAJAcxtMrYBTDuFag66Lj51vnEaKN:CQJDrI8fi/1NAcxm4vuB66JpA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a2b4f5241e39e27903e8861b793febb_JaffaCakes118

Files

2a2b4f5241e39e27903e8861b793febb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

92553ae2ecae8e4dff513c1f1ecc4a2a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
EnumResourceLanguagesA
ExitProcess
GetACP
GetCommandLineA
GetDateFormatA
GetLocalTime
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetVersion
HeapAlloc
InitializeCriticalSection
OpenFileMappingA
ReadFile
RtlUnwind
SetLastError
lstrcmpA
lstrcmpiA

user32

ShowCursor
DialogBoxParamA
DestroyIcon

shell32

SHGetDesktopFolder
SHGetFileInfoA
SHGetMalloc
SHGetPathFromIDListA
ShellExecuteW
Shell_NotifyIconA

setupapi

SetupGetInfFileListA
SetupFreeSourceListA
SetupFindNextMatchLineA

Sections

.text
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 73KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ