2e697cf6dca88a21109091a43503fbe2_JaffaCakes118 | Triage

Sharing

General

Target

2e697cf6dca88a21109091a43503fbe2_JaffaCakes118
Size

103KB
MD5

2e697cf6dca88a21109091a43503fbe2
SHA1

92a504a176dee51ff9eeb14dae57db695df023d0
SHA256

1f2cbfc2c27e501f3661c9f03ee8a9c89e1add8cb86f80943605cbceb6067a14
SHA512

c61cfbaa8f9217d055946a5544d11b63047f9ef66f3ea7b339c67d9c26bb4d8fa1f9da1a24b4e7066646bc3e64b636c2ce7ac2ae465f8768500d3c7d24240e2d
SSDEEP

3072:p04Q/GRnVkxUG0hxPVLjG/liLViZHc+dr9lxA:p04QeSxN0hiza

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e697cf6dca88a21109091a43503fbe2_JaffaCakes118

Files

2e697cf6dca88a21109091a43503fbe2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

8eb28d2cdfafffd53ddc552118e4b75f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FindClose
GetCommandLineA
GetCurrentProcessId
GetDateFormatA
GetOEMCP
GetStringTypeW
GlobalAddAtomA
HeapAlloc
HeapCreate
HeapDestroy
InterlockedExchange
LocalReAlloc
SetErrorMode
SetHandleCount
UnhandledExceptionFilter
UpdateResourceA
WritePrivateProfileStringA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrlenW

user32

EmptyClipboard
GetClassInfoA
GetLastActivePopup
GetSysColorBrush
GetSystemMetrics
IsWindowVisible
LoadCursorA
ModifyMenuA
PostQuitMessage
SetTimer
TabbedTextOutA
ValidateRect

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ