2f3b09dce308b08e0e45b3618e32b0f3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f3b09dce308b08e0e45b3618e32b0f3_JaffaCakes118
Size

787KB
MD5

2f3b09dce308b08e0e45b3618e32b0f3
SHA1

35b06fc1132fe689475514d1e17b0e86cb6ab73f
SHA256

46a6c1de7dbbd46d84e3e29e1e5e43535ee30d84e6f42a7fbb138b8c92a795de
SHA512

9c8972189e29b869b583e7dafbe65081565e5db3573080bef6043726407986ff6e48fb71b1ffd7ee6b409e883de60298bfe17d9fe2be5b1c09c17eeb910ca7f3
SSDEEP

24576:kwe1cJbKrvbArgZpur4lZHGlgC9Oy1bkf:LcctKrvkrgZpur7lgC91bkf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f3b09dce308b08e0e45b3618e32b0f3_JaffaCakes118

Files

2f3b09dce308b08e0e45b3618e32b0f3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c3dde27c198d2d1e8c7e60e28cd7b15b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
GlobalUnlock
ReleaseMutex
TlsGetValue
SetLastError
HeapCreate
lstrlen
LoadLibraryExA
GetEnvironmentVariableA
GetModuleHandleA
Sleep
CreateFileA
FindResourceA
PulseEvent
CreateMutexA
TerminateThread
FindClose
GetConsoleMode
CloseHandle
LocalFree

user32

IsWindow
FillRect
CopyRect
DefWindowProcW
DrawEdge
GetIconInfo
CheckRadioButton
CallWindowProcA
GetDC
GetDlgItem
DrawMenuBar
SetFocus
DispatchMessageA

uxtheme

CloseThemeData
GetCurrentThemeName
GetThemeColor
GetThemeBool
DrawThemeIcon

dpnet

DirectPlay8Create

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 778KB - Virtual size: 778KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ