2a0c6a359515697e5d0aa22ec8891b50_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a0c6a359515697e5d0aa22ec8891b50_JaffaCakes118
Size

48KB
MD5

2a0c6a359515697e5d0aa22ec8891b50
SHA1

77e849be3d667d30332f611c0f3b2e0b8a7afe49
SHA256

e96e456bf897cb03e4bcdeb4818026675ae3d88389e494d389265faa9b3bbf6a
SHA512

f8eb821b7670442896064bf5a75815846d85c5aa44c0700b733eab36ff08b499de2991b563cc2b1285b82a9807e4b39a932db6c454f0b8df707823d4ccde2fb4
SSDEEP

768:OCp6bs7DUXMMB0vfd6pNF5BZNRa0tANdB5wWUTZL9D2zqoCdz6vlktX7drL:OG7D2kFsFDntANT5wW4PutGx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a0c6a359515697e5d0aa22ec8891b50_JaffaCakes118

Files

2a0c6a359515697e5d0aa22ec8891b50_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7325f24d2d6d2b74b250534abbf86087

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
DeleteCriticalSection
ExitProcess
FatalAppExitA
GetACP
GetCommandLineA
GetDriveTypeA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcessAffinityMask
GetStartupInfoA
GetTimeFormatA
HeapAlloc
HeapCreate
HeapReAlloc
HeapSize
IsBadReadPtr
MultiByteToWideChar
OutputDebugStringA
ReadFile
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
TlsAlloc
TlsFree
WriteConsoleA
lstrcatA
lstrlenW

user32

GetCapture
RegisterClassExA
EndDialog
DialogBoxParamA
BeginDeferWindowPos

comdlg32

FindTextA

Exports

Exports

NxReportCooking
W32N_GetTimestampInformation

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ