2d53fd91a4e30ec97e2533aae32e7388_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d53fd91a4e30ec97e2533aae32e7388_JaffaCakes118
Size

441KB
MD5

2d53fd91a4e30ec97e2533aae32e7388
SHA1

539f8f2214cb30b52cc7d6f01d5f0f769df485a7
SHA256

a3886d36f11e52b303a7855e3184d8bd23f6eb6b5168c878bc3cee154c69afcd
SHA512

a9e97edb8abcbc9f1b685237944451ff720848e9194acb3da5fa998b542fc2bddda85504c48b07d123f2e56cfeb83a3192fe9327dc5e126fdbc922fc188de53b
SSDEEP

12288:FB+1U6etyVCns5v4gMwVwaITqSFFFFXch0r52s0ds0/r4:CGfOVhVRufFFFFXcu4dlr4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d53fd91a4e30ec97e2533aae32e7388_JaffaCakes118

Files

2d53fd91a4e30ec97e2533aae32e7388_JaffaCakes118
.exe windows:4 windows x86 arch:x86

03f1dd65201f0c19f18067dd140b7645

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLCID
GetStartupInfoA
RtlUnwind
GetModuleFileNameA
LCMapStringA
FoldStringW
GetStringTypeA
ExitThread
ExitProcess
CreateThread
HeapCreate
GetStdHandle
GetOEMCP

msvcrt

_initterm
_wcsnicmp
asin
wcscspn
wcschr
??1type_info@@UAE@XZ
__dllonexit
_onexit
?terminate@@YAXXZ
??2@YAPAXI@Z

msimg32

TransparentBlt

Sections

.text
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ