2bcf82f9e3d575b94cf1d136affd640b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bcf82f9e3d575b94cf1d136affd640b_JaffaCakes118
Size

438KB
MD5

2bcf82f9e3d575b94cf1d136affd640b
SHA1

621477a7612ad2931fbe7b9b3bc78e52f45b4a42
SHA256

cb1c5f07d90af4fe8da21f43dc3da07713a9bc945e919fb8c9f079f148605e8d
SHA512

eaeb73c6a38f4eda4e93025229ed2ec31ba6cc4745e9411325d77ba66ea22b45c06beb9e7085b3fc6f58500d0bda749f5d89b28e389fe327b43c02979da96a9f
SSDEEP

12288:xfyMlut/HZOS8zmcgf9unMcI6GLGW/J5ZjewWcsS:JFkhfHfgMchGiTJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bcf82f9e3d575b94cf1d136affd640b_JaffaCakes118

Files

2bcf82f9e3d575b94cf1d136affd640b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8db5d49cc1798d20cfd4697c24c19969

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetCommandLineA
GetProcessHeap
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InterlockedIncrement
QueryPerformanceFrequency
RaiseException
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
SetLastError
HeapSize
ExitProcess
TlsGetValue

setupapi

SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces

user32

GetWindowTextLengthA

gdi32

GetEnhMetaFileW
EndPage
StartPage
EndDoc
StartDocW
RealizePalette
GetBkColor

Sections

.text
Size: 249KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 178KB - Virtual size: 466KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ