2b8f91d37148230e3820d8b62f9703a9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b8f91d37148230e3820d8b62f9703a9_JaffaCakes118
Size

90KB
MD5

2b8f91d37148230e3820d8b62f9703a9
SHA1

d9046c5912cdde52e7f086286c4fa3b1a28019d7
SHA256

e388c4ddddafb6bf89e46ecec111641ec1c2cba8dff6a6b97866a7a203ed4369
SHA512

950721682cdbfadc001a910783b018b4f03e2dedd9ae211b86dd0e6d9fb9b086dd444c50e506a4c3e0393945a80c405ffe60bc6c709a689916bd4c0b820fdd06
SSDEEP

1536:PcpQzPUlAa8uR+LUkprrqbIlkjNmVBzW6+TSO8ebdtjWqnZvfo:JT8RCxS+kjkVMRp8eby4vQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b8f91d37148230e3820d8b62f9703a9_JaffaCakes118

Files

2b8f91d37148230e3820d8b62f9703a9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

40b5c61c5618fab52ff3159172bf67c2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyWindow
DestroyCaret
CreateMDIWindowA
CreateDialogIndirectParamA
CreateCursor
CreateAcceleratorTableA
CopyImage

kernel32

GetPrivateProfileStringA
lstrlenA
lstrcpyA
lstrcmpiA
WriteFile
VirtualFree
UnmapViewOfFile
TlsAlloc
CloseHandle
EnumResourceNamesA
ExitProcess
FlushFileBuffers
GetCommandLineA
GetLocalTime
GetStartupInfoA
GetTimeFormatA
GetVersion
InitializeCriticalSection
SetLastError

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE