2b5d3dd0c539e60422ecfdaf009d6133_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b5d3dd0c539e60422ecfdaf009d6133_JaffaCakes118
Size

374KB
MD5

2b5d3dd0c539e60422ecfdaf009d6133
SHA1

9fea1c22716a767a0e5f8bdc155c727496634790
SHA256

378712cd34f81f5e4a1e9538e3b5c7ac10cbfab3f1a698cb78084fd18edb4dca
SHA512

d50b6783cf3b86f2a2f5999e294c5d1c993b9ac611cac4a5a1f41b8578b9d4c0aa2b86eea038def27e6572786ecf85d339711d303acf8cb325bffe1ccde94445
SSDEEP

6144:5Z6ikU/NE8p/qma5b7zfTw15BVhslfcqpzH6lhPXiJgpRHF7BVZ+tez:T6ikop/qjR7DyzSzH+hftl7U8z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b5d3dd0c539e60422ecfdaf009d6133_JaffaCakes118

Files

2b5d3dd0c539e60422ecfdaf009d6133_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e0e009218cb2311d97b57974733f8686

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
LocalLock
CreateFileA
GetModuleHandleA
CloseHandle
TlsGetValue
Sleep
LocalFree
GetConsoleAliasA
FindAtomA
GetLastError
GetConsoleCP
GetACP
LoadLibraryExA
FindClose
GetCalendarInfoA
FreeEnvironmentStringsA
WaitForMultipleObjects
CreateFileMappingA
HeapCreate

user32

DispatchMessageA
CheckRadioButton
FillRect
GetIconInfo
DrawTextA
CascadeWindows
GetDlgItem
SetFocus
DrawEdge
IsWindow
DefWindowProcA
CallWindowProcA
GetDC
MessageBoxA

setupapi

CM_Add_Range
CMP_Report_LogOn
SetupCloseInfFile
CM_Add_IDA
SetupCloseLog

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ