2a7a2958ea85bce9ffb43994caefd2b5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a7a2958ea85bce9ffb43994caefd2b5_JaffaCakes118
Size

56KB
MD5

2a7a2958ea85bce9ffb43994caefd2b5
SHA1

8d261c04e1a9f4f3c0693ddb538087c6ae8ce2ef
SHA256

d5ecfd7ba70e630cddd0a669a6c5c9bf8bbad354104eb9c616e7b76d6a347d13
SHA512

ca23628981094a2e510544ebde2ea682a014356f0f99196ccb5256ab5d88cf2753ca43964f2b2097fcb4af9c683b929367624cc7e904b09727e64663e01efe1e
SSDEEP

768:/QjYFyZ2OU1DfX1dAouuZ4+cktgULrKg3pzgaPXYH2sCiSqHzStUz14/qepKl:/2voOYvTFj1cktgULVVPXYbCi/StI10Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a7a2958ea85bce9ffb43994caefd2b5_JaffaCakes118

Files

2a7a2958ea85bce9ffb43994caefd2b5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0273479bba3e0df73893542234723a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetModuleHandleA
LoadLibraryA

user32

EmptyClipboard
IsWindowVisible
ReleaseDC
GetWindowRect
DefWindowProcA
SetWindowPos

gdi32

BitBlt
CreateDCA

oleaut32

SysAllocString

msvcrt

_initterm
_controlfp
_except_handler3
__set_app_type
strcmp
_exit
__p__fmode
exit
_acmdln
__getmainargs
_XcptFilter
__setusermatherr
_adjust_fdiv
__p__commode

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ