2ae9a38753f87929f5c89653b8c31fb1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ae9a38753f87929f5c89653b8c31fb1_JaffaCakes118
Size

166KB
MD5

2ae9a38753f87929f5c89653b8c31fb1
SHA1

fd1803ce087dd8503eabe16a25ad77ba83eb280c
SHA256

0c5d745d4271e92eb0e455471d5ad16461e72faf761b44bfaeca90002ceac67c
SHA512

0ca715c61bc55c3738dff97d405a4c3b3bb6dd2e471caa4bc71181a145ac3923c090b694728e868a89f87aa9ff6ca57d78d50979eb32e89c5639986670076940
SSDEEP

3072:R2tH/Nqz2DmnFAbhoGtPSe1osTEdgXq6c3lsnKWcenURIvajf5AyG/D:stf9bhLB7o3ajAenURISbar/D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ae9a38753f87929f5c89653b8c31fb1_JaffaCakes118

Files

2ae9a38753f87929f5c89653b8c31fb1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

837d0e9d20db02b4801328f8cc6265d6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
GlobalGetAtomNameW
TlsGetValue
GetLocaleInfoA
WriteConsoleA
SetStdHandle
VirtualAlloc
HeapReAlloc
IsValidCodePage
GetDateFormatA
SetFilePointer
TlsSetValue
GetConsoleOutputCP
EnumResourceTypesA
TlsAlloc
SetThreadExecutionState
RtlUnwind
GetCPInfo
GetOEMCP
MultiByteToWideChar
GetTimeFormatA
HeapSize
RaiseException

rpcrt4

RpcStringFreeA

user32

DispatchMessageW
DispatchMessageA
GetDesktopWindow
MessageBoxA
CharNextA
PeekMessageA
LoadStringA
wsprintfA

shell32

SHGetDataFromIDListW
SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteExA
SHGetFileInfoA
DragAcceptFiles
Shell_NotifyIconA

Sections

.text
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 472KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ