2d069a9d3c0491f7b918ca0f98bb03d3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d069a9d3c0491f7b918ca0f98bb03d3_JaffaCakes118
Size

679KB
MD5

2d069a9d3c0491f7b918ca0f98bb03d3
SHA1

29a437f1ec10da2c1035fe9a35413da1b5b61aae
SHA256

0e304a72f82727084f6ca8cdbb833688c4531f1aa8a845b2b0958e559b293865
SHA512

fd93c7f020fc61ab30cdb9f51536c1227451197df112aba0ab9e8331c22a96a70e4396a0504ebc733162f4053f8bfc6ef275b1cd73c9ab886638008164037e7c
SSDEEP

12288:bAHr6nxcNBnVMWawIxE/pxtxKs3IZ9JGy3oB75W+UzaJcG:UH2xcDkwICB3LI3JJ4B75oza7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d069a9d3c0491f7b918ca0f98bb03d3_JaffaCakes118

Files

2d069a9d3c0491f7b918ca0f98bb03d3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

78c5182962cee8ca85401ca6b576882b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalSize
GetCommandLineW
VirtualProtectEx
GlobalHandle
GlobalAlloc
GlobalFlags
GlobalFix

user32

DrawEdge
CheckMenuRadioItem

Exports

Exports

CreateVncggegavt
IsAuegnmd

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 666KB - Virtual size: 672KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ