2d202e42689a06dd3dcf97403f4497f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d202e42689a06dd3dcf97403f4497f9_JaffaCakes118
Size

241KB
MD5

2d202e42689a06dd3dcf97403f4497f9
SHA1

8f92ff8205c2ee9d1e7cf7cfbede46a4aa8c66ac
SHA256

416b755feebca6e464ce51a3300f3f0167e2161efb81f1ef8852b6a21c68239e
SHA512

0344222c889368a6d1e430c52df03d9c5e781b4242b736067c2ceb04323fcefc711de27f76d95cb2ed363125d31b148ae95883c815b8106f1f1ca941d24a3fca
SSDEEP

3072:toJTu1qiBQ0cYpIB5Pl4Qeg5Sraky41PFotV72bbggEecoaUhg6saLA/0c5HrKsi:toSQYpyPl4Q9kmXWNQ72hDeQcnLKs4T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d202e42689a06dd3dcf97403f4497f9_JaffaCakes118

Files

2d202e42689a06dd3dcf97403f4497f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

69643cb208b4d7983089033331126925

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExW

kernel32

LocalAlloc
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetFileAttributesA
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
WideCharToMultiByte
ReadFile
WriteFile
SetFilePointer

oleaut32

DispInvoke
OleLoadPicture
VarUdateFromDate
GetErrorInfo
SetErrorInfo
VariantClear
SysReAllocStringLen

shlwapi

PathFindExtensionA

Sections

.text
Size: 124KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 270B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ