2f1c48dce0032fc483c3e90c2209f8bf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f1c48dce0032fc483c3e90c2209f8bf_JaffaCakes118
Size

629KB
MD5

2f1c48dce0032fc483c3e90c2209f8bf
SHA1

60247298892cd72e73b597c2e84c70e83d90489a
SHA256

dfd7bd1964cdfb714543912ee322f907a975f0774925910ddc2d1cbd770756ab
SHA512

02609f50380fa6bc669a699a019a738217837e5d7d510740fc4004357aaed28c63196d843bc17a4140f8c5512df3b280107ff15013593e48d2bc813d11f05545
SSDEEP

12288:VV+mztpWpv70l3weCpR5aXr3oFjQpnic/0qLG9l6T1c65P/fUNDj/l:V8Dv70weCpR5mnniI0X9lqW6JAT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f1c48dce0032fc483c3e90c2209f8bf_JaffaCakes118

Files

2f1c48dce0032fc483c3e90c2209f8bf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e35ac0d30f3334a2897aa07b98c9f00f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDoubleClickTime

shell32

SHGetSpecialFolderPathA
ShellExecuteA

shlwapi

StrStrA
StrChrIA

kernel32

GetCurrentDirectoryA
lstrcatA
WriteFile
Sleep
SizeofResource
RtlZeroMemory
LockResource
LoadResource
CloseHandle
CopyFileA
CreateFileA
ExitProcess
FindResourceA
GetTickCount
GetModuleHandleA
lstrcpyA

urlmon

IsValidURL

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 738B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 618KB - Virtual size: 618KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE