2880c5c0a2ec211f8521fd29cf30e211_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2880c5c0a2ec211f8521fd29cf30e211_JaffaCakes118
Size

66KB
MD5

2880c5c0a2ec211f8521fd29cf30e211
SHA1

019a9e3203910fdf4e64103ac2c331008f95153a
SHA256

b803021dd53d779da19cd871fa9687e8b15d97919ee05219a19fb435c0eeee91
SHA512

8a6da047d944138c3fe8c88f29ff7feda7d3c71ccdd3ae301d41f0f046b47a1923fb3f635afceb93a59e984161e729068a032d5b18ebccb77de0c1f556c13faa
SSDEEP

1536:eiChNjz2APY0RhdJR7dWISZXSxE9IpMx2TB:IhNVXrWIkSxE9I+EB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2880c5c0a2ec211f8521fd29cf30e211_JaffaCakes118

Files

2880c5c0a2ec211f8521fd29cf30e211_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ce0c6fcee243ec9ec7981c18f26c27c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GlobalAddAtomA
GetProcessHeap
VirtualAllocEx
GetACP
LoadLibraryA
ExitProcess
GetCurrentThreadId
VirtualAlloc
GetVersionExA
GetUserDefaultLCID

user32

LoadBitmapA
GetWindowThreadProcessId
GetMenu
GetWindowTextA
CharNextA
IsWindowUnicode
OpenIcon

Exports

Exports

KV4LV91Sk@12
Lx7NEWveK
_I4EQVRl6@12
ti8TCDPczhQx@4
_uegJBuuNxoR@24
0KSvX1lb3JQs@20
AgKCeF@12
_AdJgVR_@16
_4EHmT4kvewdk1U
_8odnzUGeCIe@20
ea0tt7bHnEE
_pyZsffXK

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data
.rsrc/0/DIALOG/TEXTFILEDLG
.rsrc/0/MANIFEST/1
.xml
.rsrc/0/RCDATA/DVCLAL
.rsrc/0/string.txt
.rsrc/1033/BITMAP/BBABORT.bmp
.rsrc/1033/BITMAP/BBALL.bmp
.rsrc/1033/BITMAP/BBCANCEL.bmp
.rsrc/1033/BITMAP/BBCLOSE.bmp
.rsrc/1033/BITMAP/BBHELP.bmp
.rsrc/1033/BITMAP/BBIGNORE.bmp
.rsrc/1033/BITMAP/BBNO.bmp
.rsrc/1033/BITMAP/BBOK.bmp
.rsrc/1033/BITMAP/BBRETRY.bmp
.rsrc/1033/BITMAP/BBYES.bmp
.rsrc/1033/BITMAP/PREVIEWGLYPH.bmp
.rsrc/1033/version.txt
.text