2ae6d3b9cf2f99a93ed0414b80c38d49_JaffaCakes118 | Triage

Sharing

General

Target

2ae6d3b9cf2f99a93ed0414b80c38d49_JaffaCakes118
Size

14KB
MD5

2ae6d3b9cf2f99a93ed0414b80c38d49
SHA1

1b5747e22d38fc9da0116610925914cff8b630af
SHA256

c2736b5eb823d2fb0ca2aa42639fee5f2ff0fd1db2ff44110722770e81c4f483
SHA512

49e81f58a56f5271812b7c1dc40440437ba9d337f37ea3bfb64679fe103072d82099adaf8fa61af3d27c21d43134bb144e12b79619631108e486a25165f0664e
SSDEEP

192:JpctHIJIhYdq2PbZCuvJ7m7jhJFBn4fVbneOeuVZWns/X6B1qDKnNK:JpctoJIudLPtbQ7WneOeuVZws/qDqDK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ae6d3b9cf2f99a93ed0414b80c38d49_JaffaCakes118

Files

2ae6d3b9cf2f99a93ed0414b80c38d49_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ea06ec1546df7b02a6cacef5272528f8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetFileAttributesA
CloseHandle
CreateEventA
GetProcAddress
CreateFileA
lstrlenA
GetModuleFileNameA
PulseEvent
LoadLibraryA
lstrcpyA
SetFilePointer
ExitProcess
WaitForSingleObject
SetEvent
WriteFile
ExitThread
GetVersionExA
CreateThread
GetTempPathA
ReadFile
lstrcatA

user32

DispatchMessageA
SetThreadDesktop
ShowWindow
PeekMessageA
CreateWindowExA
TranslateMessage
CreateDesktopA
MsgWaitForMultipleObjects
DestroyWindow
CharToOemA
wsprintfA
GetTopWindow
GetForegroundWindow

Sections

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ