2ca95c71ff5ec40d3fea867f78afa808_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ca95c71ff5ec40d3fea867f78afa808_JaffaCakes118
Size

814KB
MD5

2ca95c71ff5ec40d3fea867f78afa808
SHA1

2f5b3465196b26450b060ce0041b6843d72fb4d9
SHA256

e98a5efeee0f6b5f76fb353d3559776cd176f2f2b895c2ddb43e2308f8607693
SHA512

261b3f1fda40ac23b0166f64a2cb70180765d763df6d64d4cbb15ef8af4baa445f715e8a6f4b5068b5669de00073623999e4fd47a181e3043bc743c2f0571b0e
SSDEEP

12288:QmfyymsV+dPHLYVxUvghBGz3hm0p0GTMjC4P1tjPzTEViEL0Gcb1:QmfLhkwxUvgmz3O6mnvEV3051

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ca95c71ff5ec40d3fea867f78afa808_JaffaCakes118

Files

2ca95c71ff5ec40d3fea867f78afa808_JaffaCakes118
.exe windows:4 windows x86 arch:x86

da4c763610e2334869f07a30de219301

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateWaitableTimerA
CreateFileMappingA
CreateEventA
GetConsoleCP
GetACP
lstrlenA
FreeEnvironmentStringsA
FindClose
GetLastError
IsBadReadPtr
GetStdHandle
CreateFileA
GlobalLock
CloseHandle
IsDebuggerPresent
GetModuleHandleA
LoadLibraryExA
LocalFree
GlobalUnlock
HeapCreate

user32

SetFocus
GetMessageA
IsMenu
DispatchMessageA
CheckMenuItem
GetDlgItemTextA
GetSubMenu
GetDlgItem
ClipCursor
GetParent
EndDialog
DialogBoxParamA
RedrawWindow
DrawIconEx

apphelp

SdbFindFirstTag
ApphelpCheckRunApp
ApphelpCheckIME
SdbCloseDatabase
ApphelpShowDialog

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ