2c7b091ef78ff0eeb452486ec8f6e570_JaffaCakes118 | Triage

Sharing

General

Target

2c7b091ef78ff0eeb452486ec8f6e570_JaffaCakes118
Size

300KB
MD5

2c7b091ef78ff0eeb452486ec8f6e570
SHA1

03ea278d6990650f83821f17c459a453a5c18fb8
SHA256

5b9304dd6cf57dd08b16fc5d30248eaff973d67d2b593f065ea84e69d8bae3e9
SHA512

b15dfcab2d95b8bd8dc5696cff3cef524c80e3ff4b00af051737c695f24c40dc7ce4dd12584a263c94610d6c5f569e474a20f8f597fab27d172af3c9e14f337f
SSDEEP

6144:NaYAHzYPwo3d2RGL2cBo7RP03rM2IQ8o4de9ip4:NtCQwo3UC2cBIRujj4dIi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c7b091ef78ff0eeb452486ec8f6e570_JaffaCakes118

Files

2c7b091ef78ff0eeb452486ec8f6e570_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eaeaad852add47c519d84114b613842a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetTimer
SendMessageA
PostQuitMessage
MessageBoxA
KillTimer
GetKeyboardLayout
GetDoubleClickTime
GetDlgItem
EndDialog
DialogBoxIndirectParamA

kernel32

LoadResource
GetProcAddress
lstrcpyA
lstrcatA
WriteFile
Sleep
SizeofResource
MultiByteToWideChar
CloseHandle
CreateFileA
ExitProcess
FindResourceA
FreeResource
GetModuleHandleA
LoadLibraryA
GetTickCount
GlobalAlloc
GlobalFree
LockResource

comctl32

InitCommonControls
GetMUILanguage

shlwapi

StrStrA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 281KB - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE