2ced0651ae53e47087499a2d610aa0a5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ced0651ae53e47087499a2d610aa0a5_JaffaCakes118
Size

40KB
MD5

2ced0651ae53e47087499a2d610aa0a5
SHA1

bc579be2a7b39cfc47bf8c159bafb655ceecfa99
SHA256

42ae6c9fcb7b2185e6ac58ec0ff3ff4dea17c6659ade07d693838bfa3b8df7ce
SHA512

418f6c600f7cbd34e13099977f19ce20039a02d49c592890e8d0b0d18dc587211fe80dc07a38e99c776e1f574864505a56610713ceb35be5721cd4ea7e925345
SSDEEP

768:2KjpqBSKQ6AQRey9wW+n6FNRLpoWMSwUhW3btmkWL8:9EVJpReBhkbC2wUhWLt0L8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ced0651ae53e47087499a2d610aa0a5_JaffaCakes118

Files

2ced0651ae53e47087499a2d610aa0a5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6f4bcd88ef695a7b6646f2e9b33ee9fc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExpandEnvironmentStringsA
GetVolumeInformationA
lstrcmpW
WinExec
LocalAlloc
LoadLibraryA
lstrcpynA
GetVersion
Beep

user32

InvalidateRect
DialogBoxIndirectParamA
CopyImage
RegisterHotKey
DefWindowProcA
CheckRadioButton

gdi32

CreatePen
CreateFontA
StretchBlt
BitBlt
TextOutW
CombineRgn

advapi32

RegQueryValueW
RegRestoreKeyA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 727B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ