2d6b82d2d60165284a65ea4782d2493f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d6b82d2d60165284a65ea4782d2493f_JaffaCakes118
Size

87KB
MD5

2d6b82d2d60165284a65ea4782d2493f
SHA1

59b0db5bb62c21b49fe427b74142daf5f56dd7be
SHA256

cab5b09d5834465928ea713ab9ea33718dd58523efcdcda74bbdca0767fc323f
SHA512

279de76a215fa5422df01a3a64f64fc3ef93da7387a5534cafcc5e06350b1fcba214313d5e8cc53b92ac79a27430645de85fd5b3dba0e6a7ff425fe1594b4aa6
SSDEEP

1536:umUfEbAACglbMUqArJXHcqKbD+M0m8NQDHzc5k5715:VU8boglbMUqEXKf+zDi85kB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d6b82d2d60165284a65ea4782d2493f_JaffaCakes118

Files

2d6b82d2d60165284a65ea4782d2493f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1e2a97a109687e19d342ab97a0825178

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
LoadLibraryW
FormatMessageW
TerminateProcess
GetCurrentProcess
GetProcAddress
GetUserDefaultLCID
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleA
GetCommandLineW
GetStartupInfoW

msvcrt

_cexit
exit
wcslen
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
_XcptFilter
??3@YAXPAX@Z
__set_app_type
_controlfp
_except_handler3
_exit
__p__commode
_c_exit
wcsncat
??2@YAPAXI@Z
wcsspn
__p__fmode
wcschr
_wcmdln

user32

MessageBoxW
wsprintfW

ole32

CoUninitialize
CoCreateInstance
CoInitialize

oleaut32

SysAllocString
SysFreeString

comctl32

InitCommonControlsEx

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ