2b25158146a2ae36101c597deb9abb4f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b25158146a2ae36101c597deb9abb4f_JaffaCakes118
Size

233KB
MD5

2b25158146a2ae36101c597deb9abb4f
SHA1

24671f30893548617e6da2b38e2d7d7a43a6188e
SHA256

00596606e32d449722911c1046fcf9dd41bc8429a1640331317a1cb79ed60671
SHA512

449e9a13e189f80669d7d27f70ffd20b0e57e77ecad1d51fc402179c1298acce73286b38d4e3f4062472e276ec9646ef65b8e8b74a1d5000ea7963aa296c871b
SSDEEP

6144:07ByHBJVseh67MYMPjptM7/TWa3i2GtTBFZyc:07ByHDpSMfgbTri2GtTN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b25158146a2ae36101c597deb9abb4f_JaffaCakes118

Files

2b25158146a2ae36101c597deb9abb4f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9ae07ac5823e706b4ec1e291579fb4cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
GetModuleHandleA
GetStartupInfoA

gdi32

GetBkMode
GetBoundsRect
StretchDIBits
CombineRgn
RestoreDC
Ellipse
CreateFontIndirectA
SetBoundsRect
EnumFontsA
SetStretchBltMode

msvcrt

__CxxFrameHandler
_ftol
_CxxThrowException
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
??1type_info@@UAE@XZ
_controlfp
??3@YAXPAX@Z
_purecall

Sections

.text
Size: 188KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ