2b7cc2f0dae3bf7b5455559aa0d4cb4f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b7cc2f0dae3bf7b5455559aa0d4cb4f_JaffaCakes118
Size

342KB
MD5

2b7cc2f0dae3bf7b5455559aa0d4cb4f
SHA1

dc02437733365eeaeb2fb385e616e21eb1b625ce
SHA256

aaec25cce5bbeefccf5395fe86804b9a5bdec7ec504d28e612034bcfd3f6c7d8
SHA512

2b76cca40cb4fe9a0edd7ed7b0dc1ba02278ea3b08965e5fac4c8208211c7d9b6d64cf4d2f5cb36a1d2301291f4d0eef711be423892702ce5c51eafcc855d567
SSDEEP

6144:J9k5tgLcSj5PSXyggMfOLRTYO+9wTLfdvyhEwFUsjRLTt+/F0fFvJ:PDFhgh2R8O+yFqpLh+tKFB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b7cc2f0dae3bf7b5455559aa0d4cb4f_JaffaCakes118

Files

2b7cc2f0dae3bf7b5455559aa0d4cb4f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ce26da6595ce1e64ce438c4fe85bcd03

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
GlobalLock
CreateWaitableTimerA
lstrlenA
CloseHandle
GetStdHandle
CreateFileMappingA
FreeEnvironmentStringsA
IsBadReadPtr
LoadLibraryExA
GetACP
HeapCreate
IsDebuggerPresent
GetLastError
GlobalUnlock
CreateFileA
FindClose
CreateEventA
GetConsoleCP
GetModuleHandleA

user32

CheckMenuItem
GetParent
GetDlgItemTextA
DispatchMessageA
SetFocus
IsMenu
GetDlgItem
GetSubMenu
RedrawWindow
EndDialog
ClipCursor
DialogBoxParamA
GetMessageA
DrawIconEx

apphelp

SdbFindFirstTag
ApphelpCheckIME
SdbCloseDatabase
ApphelpCheckRunApp
ApphelpShowDialog

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ