2ae38ed6f5ee08f51fa4c8cb1a790e1f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ae38ed6f5ee08f51fa4c8cb1a790e1f_JaffaCakes118
Size

482KB
MD5

2ae38ed6f5ee08f51fa4c8cb1a790e1f
SHA1

08dd969fea2acd7b9496e517d0dd320a25e472b5
SHA256

ec86fe0613646e964ec9ab06a4ba77ec7f05b771d1151bfbb65f274063eaa741
SHA512

72acafe693512593bd1f42ab2a19268650503ee166352122bdd15504c180fb5ce312a1da8910897ff7e0d6c6ce8865273f58ba8adab440a5397491847ac32ac5
SSDEEP

12288:Cwe+tUfheXjazy3sOUdaKG2Yt4CFRmqKPFHOgbtkk:MeDcOUgK52MqKBOg6k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ae38ed6f5ee08f51fa4c8cb1a790e1f_JaffaCakes118

Files

2ae38ed6f5ee08f51fa4c8cb1a790e1f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

869fac6e264765ad6c4e928cdf06e278

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipAlloc
GdipCreateBitmapFromFile

kernel32

FindResourceExW
FindResourceW
LCMapStringA
LoadResource
LocalFree
GetVersionExA
FindAtomA
lstrlenA
HeapAlloc
HeapFree
GetTickCount
GetProcessHeap
GetLastError
IsProcessInJob
ExitProcess

gdi32

GetFontData
DeleteObject

user32

GetKeyState
KillTimer
SendMessageA
SetTimer
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
PostMessageA

Sections

.text
Size: 323KB - Virtual size: 322KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 591KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ