2cfdf7292b66dddc64f64ba9bf0959aa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2cfdf7292b66dddc64f64ba9bf0959aa_JaffaCakes118
Size

313KB
MD5

2cfdf7292b66dddc64f64ba9bf0959aa
SHA1

35fa3baadc74af5b1ca0066bcdf11095ae75a9e3
SHA256

59b0352e15b7c6808f3cd6bf9c053084f9712af021330cf7bd142a9f69b983e2
SHA512

f6b209ca37c552d8f9b1b9ff08ca23df109c87d494a99468f6efb8070430c460a7a356a5cc5b7737b5bb71378c40ba8de13bf122b33acc07a8776cae7aae6161
SSDEEP

6144:tmrsPRQ3mOAovuxZFKvAK1EweMYH/KydzlUJbTRiNPbkqIJWx32:t0Q+lAlxqj1wMuVdeJh0jLIg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cfdf7292b66dddc64f64ba9bf0959aa_JaffaCakes118

Files

2cfdf7292b66dddc64f64ba9bf0959aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

03a8717af4afb0642e4b515f6381de77

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
LocalSize
GetLastError
Sleep
VirtualAlloc
GetProcAddress
SetEvent
GetModuleHandleA
GetCurrentThreadId

user32

IsZoomed
IsWindowVisible
EnumThreadWindows
GetClientRect

gdi32

PatBlt

ole32

CoInitialize

netapi32

NetDfsManagerInitialize

avifil32

AVISaveOptions
AVISaveOptionsFree

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 702B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 209KB - Virtual size: 561KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ