2b599d76996a1aed941e5e85f6d4af1d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b599d76996a1aed941e5e85f6d4af1d_JaffaCakes118
Size

751KB
MD5

2b599d76996a1aed941e5e85f6d4af1d
SHA1

40c92d0bfdd057d7102241a9ccf2fdae065d2178
SHA256

337a0f25ae4dda2ac6efac41bd2eabce7936377d127c29dfd0a0fd42541f8522
SHA512

c929ff9eaa8b82d46303b021b23ea9a89bee0e7ef1381d4307b880ac990c9e8e0949464d0a3fd0d44f73c72db3db1ae418071e66711ca8639ba76d5652ab2a8b
SSDEEP

12288:kMxff5Vra73e8HrwLenXJRmnUd+mw/hnjKKwW98LVg43M4+:kIHDraeUuenQWRw/sKzt4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b599d76996a1aed941e5e85f6d4af1d_JaffaCakes118

Files

2b599d76996a1aed941e5e85f6d4af1d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9b93487b74848873cf65440ec83f393b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RemoveDirectoryA
GetTickCount
GetEnvironmentVariableW
GetStdHandle
GetConsoleTitleW
WaitForSingleObject
GetFileAttributesA
OpenProcess
GetStartupInfoW
ExitProcess
GetModuleHandleA
SetLastError
CreateMutexA
GetCommandLineW
WaitForMultipleObjects
CloseHandle
HeapSize
HeapCreate
ResetEvent
GetCurrentDirectoryA
DeleteFileA
Sleep
GetLocalTime
CreateFileA
FindClose

user32

CallWindowProcW
GetClassInfoA
GetDC
PeekMessageA
GetDC
MessageBoxA
FindWindowW
GetWindowLongA
DispatchMessageW
GetSysColor
DispatchMessageW
GetDC
FillRect

vbajet32

VBAGetExprSrv
VBAGetExprSrv
VBAGetExprSrv
VBAGetExprSrv

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 745KB - Virtual size: 744KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ