2fa724b4e964ec1c277c1721afbc6a74_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fa724b4e964ec1c277c1721afbc6a74_JaffaCakes118
Size

57KB
MD5

2fa724b4e964ec1c277c1721afbc6a74
SHA1

05b514be17d556b73e98e4dd3c3c1c48436b036a
SHA256

db5aa24bec7a3ecf524b19c723aef3dbaf910268d53cc6275bf95c45e0c3b3e8
SHA512

005f0839caf6b6f360e485507628a60f0f7b7d413bc17b2a5b5d0f9bd13454822e126cd4220d09dce9e72c993f55340ac4ffa412329804e4e597250098fc747f
SSDEEP

1536:vd6kORE/6QBPEgQxLZ0NeCRjjlVbv4nSZxn2SkORaHkc:F6k1CAQ30NeaknSZxnPkw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fa724b4e964ec1c277c1721afbc6a74_JaffaCakes118

Files

2fa724b4e964ec1c277c1721afbc6a74_JaffaCakes118
.exe windows:4 windows x86 arch:x86

32de2516340b816c1d7d820dde31b689

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
ExitThread
DeleteAtom

user32

CopyIcon
LoadCursorA
IsMenu
GetWindowTextA

comctl32

InitCommonControls
ImageList_Create
CreateStatusWindowW
DrawStatusText

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 422B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ