2c23a6cfd9f41b29eebfb5fcb6a5e9f7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c23a6cfd9f41b29eebfb5fcb6a5e9f7_JaffaCakes118
Size

74KB
MD5

2c23a6cfd9f41b29eebfb5fcb6a5e9f7
SHA1

358bd3f322b84c5b5fec5853acdc4d4c2906c0d7
SHA256

e4c99059f726bfae02a040387a4d0a2dc9887878cd154e9a7641c4186dbaff15
SHA512

b83b7401e116cf97cae453ead0bf596cf9482c72ca5d9f527463484d9cebaa25122c62ed3c1a7d057fb67aab0724c7f188454257d3f6d5b46891719a2f7f00cf
SSDEEP

1536:ghhqE41tSJGkJdp6EqyhUTkVVTBeNPNZvpK5NLlxNDeeR1hBgau:IhqEstSkbqhUorVetvgRPD1R1gau

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c23a6cfd9f41b29eebfb5fcb6a5e9f7_JaffaCakes118

Files

2c23a6cfd9f41b29eebfb5fcb6a5e9f7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3c64edb6f43f6d57de0a56628c6fe48e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DispatchMessageA
DialogBoxParamA
DestroyWindow
DestroyCursor
DestroyCaret
CreateMenu
CreateIconFromResource
CopyRect
CharToOemA
CharLowerA
ChangeMenuA
BeginPaint
ActivateKeyboardLayout

kernel32

ExitThread
lstrcpynA
lstrcpyA
lstrcmpiA
lstrcatA
TlsSetValue
TlsAlloc
SleepEx
SetEndOfFile
ReadFile
OpenFileMappingA
OpenFile
LoadResource
GetVersionExA
CloseHandle
CompareStringA
EnterCriticalSection
FreeResource
GetFileSize
GetTimeFormatA

Sections

.text
Size: 17KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ