2e60042dc291663b2a0737149c50dd41_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e60042dc291663b2a0737149c50dd41_JaffaCakes118
Size

89KB
MD5

2e60042dc291663b2a0737149c50dd41
SHA1

2e0fff4917d5669c0dd633fa0cedd346e8cc45a2
SHA256

543fd7b096a512651020eaf891269712f3522fce291e243e1810a9dd9aeacd54
SHA512

3b9acecfd6774dfe1a41e71b66f665087f2b03680cfad7037f7f06ee6224af08db466ca52b354dbf91a9aaf199e5e9abfe9441cc442059b6302f9defbb6c9361
SSDEEP

1536:BAVj2DWyJazTCuiwrDtdaRKdT7OSqrnF/E0m:BIJzTCuHvawt7OSu6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e60042dc291663b2a0737149c50dd41_JaffaCakes118

Files

2e60042dc291663b2a0737149c50dd41_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0d2b125e9f4ebdcf3105f26978384d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
FindResourceExA
ExitProcess
CreateThread
SetEvent
GetTickCount
GetCalendarInfoA
DeleteCriticalSection
TlsGetValue
GetDiskFreeSpaceA
VirtualProtect
GetModuleHandleA
ReleaseMutex
GetLastError
FindAtomA
FindVolumeClose
CloseHandle
lstrlenA
Sleep
SearchPathA

user32

EndDialog
CloseWindow
GetMessageA
DragDetect
DispatchMessageA
CopyImage
CreateMenu
IsIconic
GetKeyState
DialogBoxParamA
GetUpdateRect
CreateWindowExA
GetScrollBarInfo
EnableWindow

msdmo

DMOGetName
DMOEnum
DMORegister
DMOGetTypes
DMOUnregister

advapi32

RegCloseKey

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE