2c03c229ed6359ffda40d7abae841b6d_JaffaCakes118 | Triage

Sharing

General

Target

2c03c229ed6359ffda40d7abae841b6d_JaffaCakes118
Size

217KB
MD5

2c03c229ed6359ffda40d7abae841b6d
SHA1

271d83ad53acde60b7d89e6e56f39055a0021813
SHA256

6b2a0b3612ce6b4bfdcc72418703ea60b18e73cd03fa058394221d3e94e2317d
SHA512

5fb34ccf6fecb6dfe4e820f3fb5ce9b36f189c330d963bc7748ae1e1a722f48a62da725490c127d322114a55af60ad286241e1c98fda560dcf580961eb59e6ae
SSDEEP

3072:maThStLxbT9KUzQriEhhuBjI5wyUgs63bXCPZ4yrmKUXf6hkhHt1:B0VbjzVohuFsUgs63OPhVUP6Er

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c03c229ed6359ffda40d7abae841b6d_JaffaCakes118

Files

2c03c229ed6359ffda40d7abae841b6d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c47bd858c9ab5ade05dfcc068fe0fb72

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDC
GetDesktopWindow
GetSystemMetrics
CharNextA

kernel32

lstrcmpA
DeleteFileA
GetLastError
lstrcmpiW
QueryPerformanceCounter
GetStartupInfoA
VirtualAlloc
GlobalFindAtomA
LoadLibraryW
lstrlenA
GetCurrentProcessId
GlobalFindAtomW
RemoveDirectoryA
IsDebuggerPresent
GetCommandLineA
GetTickCount
lstrcmpiA
Sleep
SetLastError
GetOEMCP
GetCommandLineW
MulDiv
GetCurrentThreadId
GetCurrentThread
GetModuleHandleA
GetProcessHeap
lstrlenW
DeleteFileW
GetConsoleOutputCP
GetACP
GetDriveTypeA
GetWindowsDirectoryA
GetVersion
GetCurrentProcess
CopyFileA
GetModuleHandleW

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ