2ea20a541cd6a1ba61b538ab38332ca3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ea20a541cd6a1ba61b538ab38332ca3_JaffaCakes118
Size

112KB
MD5

2ea20a541cd6a1ba61b538ab38332ca3
SHA1

99c62f46813febb22dbac16dc9a146ebee5c11fe
SHA256

d769c14f8bc60adfcdcc177141f09b82b0791467140beac5bd7b697b1135c8f6
SHA512

12b0e64352f54ceaf69df0a8bcf1dacc12f3b80c9cfc802d6a2cd876695b5089f4f90a3cbe2108f1cbca5e253499dbf450eea5294cc005193cb7f8cfbd7d1950
SSDEEP

3072:waO5SQ7sgYkDp54Xg0WdhybYAgdAdwPVZR3cW:wfgDZOuYABdwd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ea20a541cd6a1ba61b538ab38332ca3_JaffaCakes118

Files

2ea20a541cd6a1ba61b538ab38332ca3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7991269a1483e4e3617c8118fa741eae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringA
ExitProcess
ExitThread
GetCPInfo
GetCommandLineA
GetConsoleOutputCP
GetCurrentProcessId
GetCurrentThreadId
GetDriveTypeA
GetFileTime
GetModuleHandleA
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
GlobalAddAtomA
HeapSize
IsBadStringPtrA
LoadLibraryA
QueryPerformanceCounter
SetUnhandledExceptionFilter
TlsFree
VirtualAlloc
VirtualProtect

msvcrt

strncat
strlen
strcpy
atof
fseek
fopen
atol
swprintf

user32

SetCapture
InflateRect
DestroyWindow
CallWindowProcA
DefFrameProcA

comctl32

CreatePropertySheetPageA
CreateStatusWindowA
DrawStatusTextA
InitCommonControls
CreateMappedBitmap

Sections

.text
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ