2d80426087479a4d6fbb890f8f5ed2d3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d80426087479a4d6fbb890f8f5ed2d3_JaffaCakes118
Size

52KB
MD5

2d80426087479a4d6fbb890f8f5ed2d3
SHA1

f401e6e5d0a37b3f9ec619ed2d90457e18975b4b
SHA256

c393ba3ffa056daf9940d696306fd7ed23480922eeb5c6a0c59f6c1da1e61f82
SHA512

8011a1633097b833fa4c40756e00b829054c604fe31c428ff7a22c4da1e74bc69b702d24361e3ad15b10e1e132b8037d0e27378b1ab6ebe4188fdd07c96ee2ab
SSDEEP

384:sq47OO9XIDUCcNeLNek+vDhFD+iNdF5Eam2vYPbpsN5n3:sq47OO7FBNTqavKW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d80426087479a4d6fbb890f8f5ed2d3_JaffaCakes118

Files

2d80426087479a4d6fbb890f8f5ed2d3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

30a8ce7a1279b2feece265363bfbe780

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetLogicalDrives
FreeConsole
LoadLibraryExW
Heap32First
VirtualProtect
GetDiskFreeSpaceExA
SetLastError
GetModuleHandleA
CancelIo
CloseHandle
LocalFree
ResetEvent
IsBadStringPtrA
GetLastError
TlsGetValue
FindClose
SetLocalTime
IsBadReadPtr
EnumResourceTypesW

user32

GetMessageA
GetUpdateRect
GetKeyState
EnableWindow
GetScrollBarInfo
DialogBoxParamA
DragDetect
IsIconic
DispatchMessageA
CopyImage
CreateWindowExA
CreateMenu
CloseWindow

hlink

HlinkCreateFromData
HlinkClone
HlinkNavigate
HlinkCreateFromString
HlinkOnNavigate

advapi32

RegCloseKey

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ