2af0bf11337ce94958966e5e10bb7214_JaffaCakes118 | Triage

Sharing

General

Target

2af0bf11337ce94958966e5e10bb7214_JaffaCakes118
Size

158KB
MD5

2af0bf11337ce94958966e5e10bb7214
SHA1

fea771af066aa7592f1835926eee913c1864d503
SHA256

c0f63d234850ffc72557cc34718dbb772e5ec4e24eb48beb8a99ac203cc9114b
SHA512

0ecbe6559e0f8259ae212f133d9ae6389e566fc88540a3407dc2a39e5e99e31b3a7e19dc6157c0fe3ded642c8bcac39e76854c630b960f2146f64cb8f1d5291f
SSDEEP

3072:y1FxSngp/Zew82am8LTHdRKNSAAE0fivqFrkxrmWirHZC89n6vaL:ID/Z71ATKvOkFmzHfia

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2af0bf11337ce94958966e5e10bb7214_JaffaCakes118

Files

2af0bf11337ce94958966e5e10bb7214_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b4540de292938d29f3cfb9f4179eb462

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

FileTimeToSystemTime
SetEnvironmentVariableW
GetNextVDMCommand
FreeLibrary
FileTimeToLocalFileTime
SetThreadPriority
GetShortPathNameW
GetLocalTime
LocalFileTimeToFileTime
SetErrorMode
LoadResource
EnumResourceNamesW
FindFirstFileW
FindNextFileW
FindClose
RegisterWaitForSingleObject
CompareStringA
FindResourceW
GetStringTypeW
SetCurrentDirectoryW
SystemTimeToFileTime
SearchPathW

user32

ReleaseCapture
ValidateRect
GetWindowInfo
ValidateRgn
GetCapture
InvalidateRgn
SetCapture
ExcludeUpdateRgn
GetUpdateRgn

Sections

.text
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imul
Size: 1024B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ