2cd8169887a62925dda2bbab4d03b759_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2cd8169887a62925dda2bbab4d03b759_JaffaCakes118
Size

28KB
MD5

2cd8169887a62925dda2bbab4d03b759
SHA1

22944e0ac36dc446eb1db7a064bfd68fa49474fc
SHA256

5be18123c6854773cdceacf84f3b2f9d42ec34b17ae7d09646d3dedb0d312163
SHA512

a5cf6fd00409d95f06d743251a84f95d76b36b9b10485ac32a839e5abea4b0c28c65b1927033f690b812a29ebe87e57afb31fe44e849c55534810e3816264012
SSDEEP

192:3j/SHiv8S/NWITnL2tA9yNzJ0ANdOdSRST5nP1o:398wWOyO0/OdSRST5P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cd8169887a62925dda2bbab4d03b759_JaffaCakes118

Files

2cd8169887a62925dda2bbab4d03b759_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46084168b412e051097ae39c055c9320

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
GetModuleHandleW
Sleep
GetLastError
MoveFileW
GetSystemTimeAsFileTime
DeleteFileW
lstrcpyW
lstrlenW
GetEnvironmentVariableW
lstrcmpA
lstrlenA
UnmapViewOfFile
VirtualAlloc
VirtualFree
GetModuleHandleA
VirtualProtect
SetLastError
LoadLibraryA
LoadLibraryExA
lstrcatA
lstrcpyA
GetModuleFileNameA
GetProcAddress
HeapFree
FreeLibrary
HeapAlloc
GetProcessHeap
LoadLibraryW
LoadLibraryExW
lstrcatW
ReadFile
SetFilePointer
MapViewOfFileEx
CloseHandle
MapViewOfFile
CreateFileMappingW
ExitProcess
FormatMessageA
SetEnvironmentVariableW
GetFileSize
CreateFileW
WideCharToMultiByte
lstrcpynW

user32

MessageBoxA
wsprintfW

Sections

.text
Size: 24KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE