2ee6582e143a68eeda59d12624aec0bc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ee6582e143a68eeda59d12624aec0bc_JaffaCakes118
Size

27KB
MD5

2ee6582e143a68eeda59d12624aec0bc
SHA1

afe7c1c1ac4d108ef51998e8365bdea417f98c44
SHA256

c36f403babd96386494ff6014962fd86da353c6ea097d5130ce904b26c145193
SHA512

4618ac69cc07e79f20b983db605e92f6cdc24e54198032e9379ce9a011ad285b442ee31f0774ca98516f92b8e6caf4ec7a4f919a557e4fc4f7f56da4eb582dd1
SSDEEP

384:b/EUxjKjM5pnpN9KOkhHAVWYCtcl82E4LerQGl78j5Cg7ITgnrp5ua:bnfpN9K/AQYr82E4Lerrut7ITA1/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ee6582e143a68eeda59d12624aec0bc_JaffaCakes118

Files

2ee6582e143a68eeda59d12624aec0bc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fc272d50be82df79766200996b18cdef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringA
GetCommModemStatus
QueryDosDeviceA
CreateDirectoryExW
MoveFileA
SetProcessAffinityMask
SetConsoleFont
GetCalendarInfoA
CompareStringW
IsValidCodePage
Process32Next
EnumCalendarInfoA
SetComPlusPackageInstallStatus
WriteFileGather
GetThreadPriorityBoost

user32

IsDialogMessageW
RegisterShellHookWindow
FindWindowW
IsRectEmpty
MessageBoxExA
wvsprintfW
EndPaint
PaintDesktop
GetReasonTitleFromReasonCode
FrameRect

Sections

.text
Size: 23KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 816B - Virtual size: 816B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ