2d912acca6baa8b8614fe3a1f1c9c82d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d912acca6baa8b8614fe3a1f1c9c82d_JaffaCakes118
Size

340KB
MD5

2d912acca6baa8b8614fe3a1f1c9c82d
SHA1

8418a6136b32aff0b1aa226d88fcd136f15609df
SHA256

9c03a07de268d8e7bf81e4744daef68f4c53accb0ad98b31d19674b78aac600b
SHA512

44c3a25e0c8bbbd9a24494764112cb6fd82ce7786e7dbdd12b0f4f07da49426d8168b07b2d598768a060fd8888537bcfc0cc04905c15b10f8b2be13b106024de
SSDEEP

6144:ydtHzLcSj5PSXyggMfOLRTYO+9wTLfdvyhEwFUsjRLTt+/sPJ6:KFhgh2R8O+yFqpLh+qJ6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d912acca6baa8b8614fe3a1f1c9c82d_JaffaCakes118

Files

2d912acca6baa8b8614fe3a1f1c9c82d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

950f6ecc7e1689d59b0685fdf36c7e2d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
GetConsoleCP
CreateFileA
IsDebuggerPresent
IsBadReadPtr
FindClose
FreeEnvironmentStringsA
lstrlenA
GlobalLock
GetACP
CreateEventA
GetModuleHandleA
GetLastError
LocalFree
CreateWaitableTimerA
LoadLibraryExA
HeapCreate
CloseHandle
MapViewOfFile
GetStdHandle

user32

CreateWindowExA
SetFocus
GetDlgItemTextA
IsMenu
ClipCursor
GetSubMenu
GetDlgItem
GetMessageA
EndDialog
DialogBoxParamA
RedrawWindow
CheckMenuItem
GetParent
DrawIconEx

apphelp

ApphelpShowDialog
SdbCloseDatabase
ApphelpCheckIME
ApphelpCheckRunApp
SdbFindFirstTag

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ