2b9fe8cd2cacaf7089d5c0170c69f84d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b9fe8cd2cacaf7089d5c0170c69f84d_JaffaCakes118
Size

74KB
MD5

2b9fe8cd2cacaf7089d5c0170c69f84d
SHA1

26d345f5bd79df623e6a315cb57b6f0b7a422377
SHA256

f18990f0dc53e2d1ea5ba2ebfcfa9293c850a4228b204d15d663b868223d305b
SHA512

c1e0000212fac84f0ea4cab57c5096a071920e7e148df77825f6a20261ced6f54119c51febe1d38f365fcb93cc84cf6285e0471742a0d5c2d8da9c022ed22983
SSDEEP

1536:rd0WhCN+VW1X/nytzQ23cRvzg6YIZzcU5+9IIkaudyQcw4GIlf1YQ:m+VWh/yts2MRzg6TZzdRdvN4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b9fe8cd2cacaf7089d5c0170c69f84d_JaffaCakes118

Files

2b9fe8cd2cacaf7089d5c0170c69f84d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

786c270f9bf875c3346c75a1ea619a6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

InvertRgn
PolyPatBlt
RectVisible
CreateRectRgn

msvcrt

_copysign
__p__tzname
__p__wpgmptr
_mbsnicmp
_dup
_getws
_inp

kernel32

CreateEventW
GetCommConfig
GetCurrentProcessId
GetThreadLocale
LocalAlloc
LocalHandle

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE