2b1417a66a4524347128d5981be406db_JaffaCakes118 | Triage

Sharing

General

Target

2b1417a66a4524347128d5981be406db_JaffaCakes118
Size

117KB
MD5

2b1417a66a4524347128d5981be406db
SHA1

beb2db1a62525f9593987620e03ce3f8cb6524eb
SHA256

6e28c0d853c13e15598a264a38280d7ab7e4e9103274aa4988552f623e589f18
SHA512

f399d3d86899b1817bfac260b4e131b817dd901d419adfbe70bef5efa71ef50e496321e79112dca95bac12ecb9071a7c1bc74d268e9101a36471f01969b8b617
SSDEEP

3072:4dbOM7xMn8o76Ji7j3TQyxNPOszysswCn7i:4EM1MN7D8+NGsevQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b1417a66a4524347128d5981be406db_JaffaCakes118

Files

2b1417a66a4524347128d5981be406db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c6081e4d60766c8df68c022f33ec46e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
DispatchMessageA
ShowWindow
RegisterClassExA
PostQuitMessage
MessageBoxA
LoadIconA
LoadCursorA
GetMessageA
GetDesktopWindow
DefWindowProcA
CreateWindowExA

kernel32

CloseHandle
SetEvent
MulDiv
GetProcAddress
GetModuleHandleA
GetCommandLineA
GetCPInfo
FlushFileBuffers
ExitProcess

comctl32

InitCommonControls
InitCommonControlsEx

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 714B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ