2ff245ebd5386225c76fe37c44038591_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ff245ebd5386225c76fe37c44038591_JaffaCakes118
Size

363KB
MD5

2ff245ebd5386225c76fe37c44038591
SHA1

92c3dda7e5f277c3d502157f2a604c843325a5b5
SHA256

907c0ec3d6b736ea9c70d501bf58888f52a754e945dc249bb21b1891282279e7
SHA512

0b09a91db86c6c383af76953cca7396b1116d4eb5c7f9235b640cf640b0899c7cb8ff8d0781d343bff4c520529fd4e5f5e41924ef23277f6c41813459e6d0e05
SSDEEP

6144:+iJwnMGOr8fe0AJgjchjTnDqNkCYV7zj9nd56t6L8R8NmC:J+n9O8e0Fcx/bV7Pn5k+XNH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ff245ebd5386225c76fe37c44038591_JaffaCakes118

Files

2ff245ebd5386225c76fe37c44038591_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0c3d06875f0cdb98928ea21e23c2f1a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetTickCount
SetLastError
GetLastError
CloseHandle
ReleaseMutex
FindClose
GetExitCodeProcess
TlsGetValue
GetModuleHandleA
FreeConsole
GetDiskFreeSpaceExW
GetDriveTypeA
EnumResourceTypesA
CreateMutexA
DeleteCriticalSection
LoadLibraryExW
GetComputerNameA
GetCommandLineA
VirtualProtect

shell32

ExtractIconA
DllUnregisterServer
ShellMessageBoxA
SHGetDiskFreeSpaceA
SHFree
StrChrA
DragQueryFileA
DuplicateIcon
DragFinish
SHGetSettings
SHGetMalloc
ShellAboutA
DragAcceptFiles

printui

vPrinterPropPages
bPrinterSetup
bFolderGetPrinter
vQueueCreate
PnPInterface

user32

MessageBoxA

Sections

.text
Size: 1024B - Virtual size: 632B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ