2a84211f0daa4d6e8d5d4cd8ac58bd27_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a84211f0daa4d6e8d5d4cd8ac58bd27_JaffaCakes118
Size

772KB
MD5

2a84211f0daa4d6e8d5d4cd8ac58bd27
SHA1

9b92a1988c4a49094eb6244d072b790bcb0965f1
SHA256

c6be347f7e91fe842c2fcba48d5c3ba01be9149f834baf3c84767e4d81375a02
SHA512

9dc60195c87101921a1da8b372438879e76e6d3958fbc19d51f45ecb856470c7683d9a636f7cf037111a8b3a34a6344363d508db937b02ea6dbd49bd0de0f5ea
SSDEEP

24576:DENh1ncFk4QD2RLmhmmrRlGNFe5h67yv:ANhVEky9q9rRlGzew7yv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a84211f0daa4d6e8d5d4cd8ac58bd27_JaffaCakes118

Files

2a84211f0daa4d6e8d5d4cd8ac58bd27_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ceaa56cabec71efb8b1652101c32e7cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetEnvironmentStringsW
InterlockedExchange
OpenProcess
GetLastError
GetModuleFileNameW
GetProcessId
CreateThread
Sleep
WaitForMultipleObjects
ExitProcess

msvcrt

_initterm
_controlfp
_j0
__p__fmode
__set_app_type
__setusermatherr
_amsg_exit
_initterm
_wcmdln
exit

user32

DrawTextW
GetIconInfo
GetSysColor
GetDC
ReleaseDC

newdev

UpdateDriverForPlugAndPlayDevicesW

shlwapi

PathAppendW
UrlCombineW
PathCombineW
UrlGetPartW
UrlApplySchemeW
UrlCanonicalizeW

Sections

.text
Size: 445KB - Virtual size: 445KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 309KB - Virtual size: 309KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ