2aa1c2bc888b098542ebd1dc673a41d6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2aa1c2bc888b098542ebd1dc673a41d6_JaffaCakes118
Size

58KB
MD5

2aa1c2bc888b098542ebd1dc673a41d6
SHA1

0b94641a022e3a0727cf9f8fbef433f245010379
SHA256

da7466370a1ab836e7e6c569d1f6bbd5388d1a829d318243db4fe079d67ac2fd
SHA512

52b4c95608d62e56be61e84d0bc949f168f776d7497045e53b3d80605ac1af1e1ed7571d927ca79f65d466274e3a40988fd0fa386efe53628025a8c9ca5abcee
SSDEEP

1536:tdMsPpcI2E4NFa5yY4OT3SLn3YEJLEkvOt7d:QsPKi++Yn3YEJEkvgd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2aa1c2bc888b098542ebd1dc673a41d6_JaffaCakes118

Files

2aa1c2bc888b098542ebd1dc673a41d6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

aa7713a71826d86eadab63a1b17e5e11

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassExW
GetCapture
BeginPaint
GetDoubleClickTime
EndPaint
SetWindowTextA
GetAsyncKeyState

gdi32

GetStockObject
GetArcDirection
GetBrushOrgEx
CreateRoundRectRgn
DeleteObject

comctl32

ord17

kernel32

GetEnvironmentVariableA
GetDateFormatA
SetEndOfFile
HeapFree
GetLastError
GetModuleHandleA
GetProcAddress
GetEnvironmentStrings
FreeLibrary
DeleteCriticalSection
LeaveCriticalSection
LoadLibraryA
EnterCriticalSection
InitializeCriticalSection
HeapAlloc
IsProcessorFeaturePresent
HeapCreate
MulDiv
GetCurrentDirectoryA
GetStartupInfoA
GetProcessVersion

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ