2ccd21338284344d0171f7a2628ef797_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ccd21338284344d0171f7a2628ef797_JaffaCakes118
Size

414KB
MD5

2ccd21338284344d0171f7a2628ef797
SHA1

c333c76aa1f35a3963aaa38917911bf39f37560c
SHA256

1da696205eadeab573416483c6297c46bae7be4ed1e476fb6e6c5b1185136c85
SHA512

cbf0d3c12a1ecfab9d68261dc5122873216d0e2d7aa4d18defeb9de36231fa6c7e3ba5d4c8e1f5ee78c80cbceb05d0cb33f4dbb411e53de763d88d14dff7b874
SSDEEP

12288:KnvPmrkNkVhkkuK2Qtm98oQ8wUDXVzwl:OPyCkPz2EG8opHlw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ccd21338284344d0171f7a2628ef797_JaffaCakes118

Files

2ccd21338284344d0171f7a2628ef797_JaffaCakes118
.exe windows:4 windows x86 arch:x86

70c79d906725de0a20e160461957646f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameW
LoadLibraryW
ReleaseMutex
GetDriveTypeA
GetFileAttributesW
LocalFree
FindAtomA
ExitThread
SetEvent
CreateFileA
HeapCreate
GetProcessHeap
GetTickCount
GetDiskFreeSpaceW
GetCommandLineW
GetLocalTime
CloseHandle
ReleaseMutex
lstrcpynA
LoadLibraryA

user32

SetFocus
CallWindowProcA
GetComboBoxInfo
DestroyCaret
CreateWindowExA
CloseWindow
FillRect
GetKeyState
GetClipCursor
DispatchMessageA
GetDlgItem
DrawStateA
GetClassInfoA

snmpapi

SnmpUtilMemAlloc
SnmpTfxClose
SnmpUtilMemFree
SnmpTfxQuery
SnmpTfxOpen

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 402KB - Virtual size: 401KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ