2f443eeecd58c67f3ea19036c7d95df7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f443eeecd58c67f3ea19036c7d95df7_JaffaCakes118
Size

446KB
MD5

2f443eeecd58c67f3ea19036c7d95df7
SHA1

9d0fcd38f0ed6e77461d1c656165ba751c5fff20
SHA256

1e7e9396bc784402bbf58be44fab11855c2d76c3971d45503e012a2c0e5693c3
SHA512

97088604b423e50f56a438ebaa48bb61d8fcdc031006e25e2d41f6cb3fb7c5b8242f81f1839943a702a770f2d0af4567e7c69832a2f8f4d0e37d5c239e5b1e89
SSDEEP

12288:kzY1iXanBZQMfSK+r+zHPL2b4Ju24LcFu:kzKzfS9raL2b4Ju

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f443eeecd58c67f3ea19036c7d95df7_JaffaCakes118

Files

2f443eeecd58c67f3ea19036c7d95df7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b9a2a15bdfb96a5d2d6270538071a78e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipAlloc
GdipCreateBitmapFromFile

kernel32

FindResourceExW
FindResourceW
LCMapStringA
LoadResource
LocalFree
GetVersionExA
FindAtomA
lstrlenA
HeapAlloc
HeapFree
GetTickCount
GetProcessHeap
GetLastError
ExitProcess

gdi32

GetFontData
DeleteObject

user32

GetKeyState
KillTimer
SendMessageA
SetTimer
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
PostMessageA

Sections

.text
Size: 298KB - Virtual size: 297KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 139KB - Virtual size: 463KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ