2eaa6ceca33b8b30346dc9e3c5297206_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2eaa6ceca33b8b30346dc9e3c5297206_JaffaCakes118
Size

109KB
MD5

2eaa6ceca33b8b30346dc9e3c5297206
SHA1

8bf573e8b44190625397c39f5515fc7f10b79b99
SHA256

1731303bfe4b4420eb34567162ee4f78116c32c731c1e1bfb48704b2e28e91bc
SHA512

66715377f4ae6373d7ea3b13961117bcf244d612c844c47742d8b35342dc639630c358719a9d6903c80552ea0e371da2222bd3898b95dceee61016b5a67e28c6
SSDEEP

3072:mS2InuUSPioI3aisnGm61Ga1Y2mS2aj9Y9:+IF078anW310nB9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2eaa6ceca33b8b30346dc9e3c5297206_JaffaCakes118

Files

2eaa6ceca33b8b30346dc9e3c5297206_JaffaCakes118
.dll windows:4 windows x86 arch:x86

342e9dbaf86e88f4cdc1cff3f8d9fb99

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

OemToCharBuffA
MessageBoxA
MessageBeep
LoadCursorFromFileA
LoadCursorA
EndPaint
EndDialog
EmptyClipboard
DrawTextA
DestroyCursor
CreateIconFromResourceEx
CreateDesktopA
CopyRect
CharToOemBuffA
CharNextA
ActivateKeyboardLayout

kernel32

lstrcmpiA
ReadFile
MapViewOfFile
InitializeCriticalSection
GetVersionExA
GetSystemTimeAsFileTime
GetStartupInfoA
GetModuleHandleA
ExitProcess
EnumResourceTypesA
EnumResourceLanguagesA
CloseHandle

advapi32

RegQueryValueA
RegOpenKeyExA
RegCloseKey

Sections

.text
Size: 45KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 62KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ