2f2805ab9b2ebec35f9ee3b8cfcce7d1_JaffaCakes118 | Triage

Sharing

General

Target

2f2805ab9b2ebec35f9ee3b8cfcce7d1_JaffaCakes118
Size

120KB
MD5

2f2805ab9b2ebec35f9ee3b8cfcce7d1
SHA1

8748b2d06f0935d9a2c6fcb98013a10655a0a5f0
SHA256

75089aaead698589dc229cf7929e050b87bb9cffef0f8f1db3d9cb3688004089
SHA512

2ccefc63a0865bee12abd1c355ceea1422805a2d77e4be87aca3edaa1e07ef1f44fa0955cd9d9b539ebcaa228340a3ec29d780e766663aa35ea379e330387b0e
SSDEEP

1536:GKzO6OaRmugX5gPJf/TuM1VjqyZNhymYSbsze6/QyPXM0hHg87yz1YR/Pn07t9gr:jzeX5cTH1Bq+zJ3szOyPRhA8G+E9goip

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f2805ab9b2ebec35f9ee3b8cfcce7d1_JaffaCakes118

Files

2f2805ab9b2ebec35f9ee3b8cfcce7d1_JaffaCakes118
.exe windows:1 windows x86 arch:x86

149233022f4086be7b917f08482b7437

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_exit
_acmdln
exit
memcpy
_except_handler3
_XcptFilter
__p__fmode
_adjust_fdiv
_initterm
__p__commode
__getmainargs
__setusermatherr
__set_app_type
_controlfp

gdi32

GetTextExtentPoint32A
SetTextColor
SaveDC

kernel32

VirtualAlloc
GetModuleHandleA
VirtualProtect
VirtualFree
GetStartupInfoA

user32

ChildWindowFromPoint
FindWindowA
BeginDeferWindowPos
GetCapture
DefFrameProcA
IsZoomed
CheckMenuRadioItem
LoadCursorA
GetMenuItemID
GetUserObjectSecurity
GetClientRect
CheckRadioButton
SetWindowTextA
GetSysColorBrush
DialogBoxIndirectParamA
DialogBoxParamA

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ