2a3a90ce50f674145878422a7225aec5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a3a90ce50f674145878422a7225aec5_JaffaCakes118
Size

367KB
MD5

2a3a90ce50f674145878422a7225aec5
SHA1

75bf92e5949b747f03800f337621a88474cd157b
SHA256

dcbd3beee9693e2c4181e790aac07f3f251b05e2d3ba3def3cd7dd3910a1418b
SHA512

c20a986e6b1fabdf3d9113a7cc3e810c6b67d46d3d1c009b4459034ac12c1d472fe32e4c0c1ce775981319ae68e966264515b64e6d8f278dd154812c7ed0367f
SSDEEP

6144:EgG4HduNvC0agNm9lIPJ2WNDT3oCpLGAcl+DegosQSm/SjJwbK+TfgPInQ:A4HduNvCZ9lIPcW93oyGd6e3sg8JT+b6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a3a90ce50f674145878422a7225aec5_JaffaCakes118

Files

2a3a90ce50f674145878422a7225aec5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

08888227a66f0dfa657ea89501d4e56a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CreateFileA
ReleaseMutex
GetCurrentThreadId
SetEnvironmentVariableA
CreateMutexA
TlsGetValue
CloseHandle
TerminateThread
GlobalUnlock
HeapCreate
LocalFree
lstrlenW
GetStdHandle
SetLastError
FindResourceA
GetConsoleMode
GetModuleHandleA
GetPriorityClass
LoadLibraryExW

user32

SetFocus
DrawEdge
GetIconInfo
GetCaretPos
DispatchMessageA
IsWindow
GetDlgItem
CopyRect
FillRect
GetDC
DrawMenuBar
CallWindowProcA
CheckRadioButton

apphelp

SdbFindFirstTag
ApphelpCheckIME
SdbGetDatabaseID
SdbFindNextTag
SdbCloseDatabase

clbcatq

ComPlusMigrate

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 428KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 343KB - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ