2bff835c3ebb41884eb2ee8b5ce474f3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bff835c3ebb41884eb2ee8b5ce474f3_JaffaCakes118
Size

48KB
MD5

2bff835c3ebb41884eb2ee8b5ce474f3
SHA1

e710774fdaba44458164ca519f451acb5e709cd9
SHA256

abf25995cf6d3ad371c67243b5bc48bf8b45b0e3895a640405c9faaab6e879ed
SHA512

9b96578d4976162f7812e623cb734d179eaecc4e78d3cbeeff8185ae1315cf9f3b9dc3675972378159a04aad7c789996050220e2f21adddffa9b8f488795810d
SSDEEP

768:cQ+dUNp/Q3qY5hA0LsVbNb5GWDuFtHpr9VH6npL5viGXsHDkPp1ju7qDO2wSzV:1Kmp/Q7ASsBsfHnV4QKsHDq87qDRzV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bff835c3ebb41884eb2ee8b5ce474f3_JaffaCakes118

Files

2bff835c3ebb41884eb2ee8b5ce474f3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

17497acce619e2de6492d514bda9d2ce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetROP2
EndPage
BitBlt
LineTo
SelectClipRgn
RestoreDC

kernel32

Sleep
GetCommandLineA
GetSystemTimeAsFileTime
GetCurrentThreadId
GetModuleHandleA
GetLastError
GetTickCount
FormatMessageA
lstrcpynA
ExitProcess
SetTimeZoneInformation

msvcrt

_exit
wcsstr
tolower
strlen
strchr
bsearch
strcspn
_getcwd

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE