2e0dd8b23ddd0d06277e8c205fb2f1b1_JaffaCakes118 | Triage

Sharing

General

Target

2e0dd8b23ddd0d06277e8c205fb2f1b1_JaffaCakes118
Size

32KB
MD5

2e0dd8b23ddd0d06277e8c205fb2f1b1
SHA1

3f5d39b6beda179af0c0d7896b56a8b2783e351f
SHA256

cbdd4ceb38916af143450e78502584548869b46db5176f2190bbfcbefe4d507b
SHA512

3d857306a6878d88036e15bd55f56aa4998edfeddef901fd74b4306f22f6e82c6636bda1454e73140be5ead319a51af170fa3102dfbe30a36345f9f679998d17
SSDEEP

384:2tox42cnkMFjKu7xrVKSei3aRqnNFZxM1dTDm/2JmrwNYYWDkKKD3H:2tR2cfR7ZVplNFZ6Tm+y69

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e0dd8b23ddd0d06277e8c205fb2f1b1_JaffaCakes118

Files

2e0dd8b23ddd0d06277e8c205fb2f1b1_JaffaCakes118
.exe windows:1 windows x86 arch:x86

ef8f873f9628ab1b40373f9cbaa34678

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExA
LoadIconA
LoadCursorA
RegisterClassA
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
SetWindowLongA

kernel32

LoadLibraryA
GetProcAddress
ExitProcess

Sections

.code
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 410B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ