2b6a7417a721b3054aa45bfd0a4e4fe3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b6a7417a721b3054aa45bfd0a4e4fe3_JaffaCakes118
Size

43KB
MD5

2b6a7417a721b3054aa45bfd0a4e4fe3
SHA1

1bb05c7126452df4f71ddc73147b8cc0e1207ee2
SHA256

c3a76207af12670c838457d3a9716de7b243a88d47474f6ff8ebb955d45fd50c
SHA512

4c4b868ebfa9c97c9909d3e7bbcf9ed46da0ad990485b998753f464f7ede2571a43c0ff2843a28241d4062b21db77e4753f6944e18b722beb78318c84a5970c2
SSDEEP

768:iOjBcYOlK5P3tVHGq1fXGU3Hk2U3K2MfbT0BqP+5ErNo6jy3DHCQs:NjBWlMPdYmfD3Hk2UYEqW5so6jy3DH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b6a7417a721b3054aa45bfd0a4e4fe3_JaffaCakes118

Files

2b6a7417a721b3054aa45bfd0a4e4fe3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

94c984121a90091582fab3aecfff1efa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
VirtualAlloc
GetProcAddress
VirtualFree
HeapAlloc
MapViewOfFileEx
LoadLibraryA
CreateFileMappingA
GetCommandLineA
GetModuleHandleA
UnmapViewOfFile
CreateFileA

user32

DialogBoxParamA
LoadIconA
LoadCursorA

advapi32

RegOpenKeyA

comctl32

ord17

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ