2cb4b1d4901bcf03a70950541d9da007_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2cb4b1d4901bcf03a70950541d9da007_JaffaCakes118
Size

287KB
MD5

2cb4b1d4901bcf03a70950541d9da007
SHA1

f1105def1e4b249d0d55e779a370359a5065226b
SHA256

e2ac21321b1efed4baac416f1906c15cf8dbf368c2d169da38280259c647275c
SHA512

1d1fd47a9fdc8f7008b20e04566ce74462d0c73b2102f6993f54a6ad5db6aa7e992521f0d49136e14699436c182b1aa3ad5162717435521e7f0cd1600e49fd15
SSDEEP

6144:NsidBoC+H944j7YU1mIsLH3pL3wmpzKpPGu:NsH95mIa9AIKx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cb4b1d4901bcf03a70950541d9da007_JaffaCakes118

Files

2cb4b1d4901bcf03a70950541d9da007_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae80e04a4bbd6c9e1ed4a21b11a30c41

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateEventA
CreateIoCompletionPort
CreateThread
EnterCriticalSection
ExitThread
FormatMessageA
GetCurrentThread
GetTickCount
GetTimeFormatA
GlobalAlloc
GlobalUnlock
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
LocalSize
LocalUnlock
SetEvent
Sleep
TerminateProcess
WaitForSingleObject
WriteConsoleA
lstrcmpA
lstrcmpiA
lstrlenA

user32

CharUpperBuffW
EndPaint
GetDC
GetKeyState
IsWindow
LoadBitmapW
LoadImageW
MapWindowPoints
PaintDesktop
SetFocus
SystemParametersInfoW

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1014B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 273KB - Virtual size: 275KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ