2e3bf198b3d757cac2c0c2576747332e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e3bf198b3d757cac2c0c2576747332e_JaffaCakes118
Size

16KB
MD5

2e3bf198b3d757cac2c0c2576747332e
SHA1

cac875babad7b909581f2da73dd6002bace3484e
SHA256

db1ac8150abca1b770c1db0c7f92777a9818521cbe901469208acb9ce2a1bfbe
SHA512

f311dec2d6099185b75461d4016f9ef71659d99ec06817e030f7b66f092e46208b6fb0e61d90f7a90492032c373d5f0b3da4ae2aabc0ed1a724afb9ceff116f3
SSDEEP

384:E8nnx7OVA8MXykBMDlJEkjSg8PN9CTgMIqcZ:3k/SMJJdasTNI3Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e3bf198b3d757cac2c0c2576747332e_JaffaCakes118

Files

2e3bf198b3d757cac2c0c2576747332e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

fdb7543c7b885e8a68ab548905ecd8a8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualProtect
GetFileSize

user32

BeginPaint
CreateWindowExA
DefWindowProcA
DispatchMessageA
EndPaint
FindWindowA
GetMessageA
GetSystemMetrics
LoadCursorA
LoadIconA
MessageBoxA
PostQuitMessage
RegisterClassExA
SendMessageA
ShowWindow
TranslateMessage
UpdateWindow

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 662B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ