2b96b60d170d996b33a66c4e9029ce57_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b96b60d170d996b33a66c4e9029ce57_JaffaCakes118
Size

67KB
MD5

2b96b60d170d996b33a66c4e9029ce57
SHA1

97ab60067daf2b11459107c6d9910899cbadfb45
SHA256

d6c566b9b16b4b0cfec00bf2b182ecb5b99c1b2d58932393936532efc5e5b80c
SHA512

3fc57ffafa5eefe7a3d2fc413225f6dee4d02e3e82e5940d133a3d13ee68a8ab4cb0dbcc3085d0b3c009cc20ba742fd88f0b7253aa7c50a127021d46af1fe9e9
SSDEEP

1536:tBvS2nvMtjP8TtnKetZJ+uT7YqUn+PyfSdsyuJi+SsF:tc0MJPUBtbTcqUn5fSFAi+l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b96b60d170d996b33a66c4e9029ce57_JaffaCakes118

Files

2b96b60d170d996b33a66c4e9029ce57_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3200f98c78dc9f1c321d69161a1b8cdf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCommandLineA
GetModuleHandleA
GetProcAddress
InterlockedExchangeAdd
RtlZeroMemory
VirtualAlloc
lstrlenA

user32

CreateDialogParamA
EndDialog
GetWindowRect
LoadCursorA
LoadIconA
MessageBoxA
MoveWindow
SendMessageA

Sections

.text
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 498B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ