2f60c22881b9581be0887d4a57df2aff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f60c22881b9581be0887d4a57df2aff_JaffaCakes118
Size

15KB
MD5

2f60c22881b9581be0887d4a57df2aff
SHA1

9511c98929337fcc693e8ea7954e74c7fb024025
SHA256

0d2dffb7185b3ff05edc23e892436fd0efb3717b08b3d6b54bb4c12a4da86427
SHA512

fc45735879b65834cc17c708b6a31f48f9d3c8730246c156ae31057d363f6281881a3c55f388577facd3d5f01c769825f4bbd387bb1e3fa7f8c76872a0b1b32a
SSDEEP

384:pyJSJ9Hl/erAn/mFTldcgwsvv0f57LPvKpuB:vJyr0OegxMf5T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f60c22881b9581be0887d4a57df2aff_JaffaCakes118

Files

2f60c22881b9581be0887d4a57df2aff_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b25799a703c382b634c5f98ea174e084

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
HeapAlloc
VirtualAlloc
VirtualProtect
GetFileSize

user32

BeginPaint
CreateWindowExA
DefWindowProcA
DispatchMessageA
EndPaint
FindWindowA
GetMessageA
GetSystemMetrics
LoadCursorA
LoadIconA
MessageBoxA
PostQuitMessage

Sections

.text
Size: 1024B - Virtual size: 930B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 502B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 98B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ