2b0f8321fc7333b236ff8cbe3b2e32d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b0f8321fc7333b236ff8cbe3b2e32d0_JaffaCakes118
Size

84KB
MD5

2b0f8321fc7333b236ff8cbe3b2e32d0
SHA1

c0abf9643822bf504c989deb901437cf039e9abb
SHA256

200cfaed363e63b285008e881a844587c5265ada1d653641e9dbd3b2317ff98d
SHA512

11e38c87a55cb3066d7220e5f78dc0428eeb97f9c34f3e7aa8349cd6fe2235fc5a77c8e09923735da45f80f3721b93bd0d2960b0ccda90bf56aa75ca9106cbf8
SSDEEP

192:yJ5PTCh13Ata1nvp8t/twi1oyne5okipR8EWx5VRtTwZxf1I/Tzoz0ZY6yNFZ+wh:uPTNaRk/6i1rtA5b9ie/Tzoc+3h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b0f8321fc7333b236ff8cbe3b2e32d0_JaffaCakes118

Files

2b0f8321fc7333b236ff8cbe3b2e32d0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c30105e17c559f2ac6646d9eae3ee719

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
QueryPerformanceCounter
GetEnvironmentVariableA
HeapAlloc
SetMailslotInfo
GetModuleHandleA
GetStartupInfoA

user32

GetQueueStatus
LoadBitmapA

ole32

CoInitialize

msvcrt

_adjust_fdiv
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_acmdln
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 750B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE