2fc728358a1a8137a963f730cd916c73_JaffaCakes118 | Triage

Sharing

General

Target

2fc728358a1a8137a963f730cd916c73_JaffaCakes118
Size

63KB
MD5

2fc728358a1a8137a963f730cd916c73
SHA1

52b2fe9f542cbaa0d2b753e67ad6379502453a7b
SHA256

207ad13fccdfbb2fda2c18d6e71f5bfdc501e50566ff5af6262e2cb69faa676f
SHA512

7de3ceef45dc1603c8df2b7e49fc117f2b83029e20dceadba0ec687bac23115302d59ce8d2d32157b269c853236cf358470186c996fcaa8ab33765367bc57b11
SSDEEP

1536:pRuIgP0DqsGl25Um+oP5r5RjjY+yzPD1e/GE3:TgsDJUm+k5rjy9IGE3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fc728358a1a8137a963f730cd916c73_JaffaCakes118

Files

2fc728358a1a8137a963f730cd916c73_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2f0b4d131ef51dcb8212af328b05cb2f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExW
VerifyVersionInfoW
GetProfileStringA
MultiByteToWideChar
GetFileAttributesA
AddAtomW
LoadLibraryExA
_lclose
MulDiv
DebugBreak
IsBadReadPtr
GetLongPathNameW
GetOEMCP
GetTimeZoneInformation
ConnectNamedPipe
lstrlen
VirtualProtect
GetLongPathNameA
EnumDateFormatsW

user32

GetParent
TranslateMessageEx
MessageBoxA
DestroyWindow
CreateWindowExW
PeekMessageA

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 735B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ