2b3a3d0b6c841dae8a282c3bc5397278_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b3a3d0b6c841dae8a282c3bc5397278_JaffaCakes118
Size

32KB
MD5

2b3a3d0b6c841dae8a282c3bc5397278
SHA1

2080b617684e31d956d26e871adbb8472922c59a
SHA256

cd402699658f58f40feb61a9c56dd4df8721089baa0c96a17ff8c2d4c1d44cea
SHA512

7d2b7d50c540434ef28bea9fe2af9a023eb378d7d447a25f15113aa301913c330e8bed8e7f69d284af85ba5ae3517b9f1ef3ca6e039c183706c99ab2b69832d5
SSDEEP

384:myQndSjokEdJkJbUS0gAUTffeOZLnN8kukoVTkyFlbT6ssrgm:m9ndSMkEJqbU0TfppnukukoVTxTbGB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b3a3d0b6c841dae8a282c3bc5397278_JaffaCakes118

Files

2b3a3d0b6c841dae8a282c3bc5397278_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6ba29f0dac53851fe09b2b423cfb83f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
CloseHandle
ReadFile
GetEnvironmentVariableA
SetEndOfFile
OpenMutexA
GetVersionExA
SetFilePointer
IsBadCodePtr
FlushFileBuffers
CreateFileA
Sleep
GetFileType
WriteFile
GetCurrentDirectoryA
CreateMutexA
InterlockedDecrement
GetLastError
SetEnvironmentVariableA
GetModuleHandleA
VirtualAlloc
ExitProcess
LocalFree
FormatMessageA

user32

EnableWindow
MessageBoxA
wsprintfA
CreateWindowExA

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ