2e03b61675edabc4c7ffcf9e562c98c9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e03b61675edabc4c7ffcf9e562c98c9_JaffaCakes118
Size

149KB
MD5

2e03b61675edabc4c7ffcf9e562c98c9
SHA1

c942eaa58eaa122c49a4a0508fb8fff8dd5cd31b
SHA256

7d27308b0123e7407a900493b75c6957ee28ed11002f04f073b9457a819dfe57
SHA512

512a36dd10a0a7910506d0898b764718de28ccdb21dfc36f2516a5c8cfec20ab1e9f9f96cc0f79fdbb9c76d0665bc13e75b2d91dbc9588e236307aaedaa35158
SSDEEP

3072:iStUkCoSCe1RmryMoHjOcpyoMttH1jFp8Z4Dwfuj5QtuSfQ:iS9CoSHRm2yoMLH1AZ4DwSQtfI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e03b61675edabc4c7ffcf9e562c98c9_JaffaCakes118

Files

2e03b61675edabc4c7ffcf9e562c98c9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c6bdd66617c2ef1315047cfd94c6abc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError

ntdll

RtlSetIoCompletionCallback
RtlGetActiveActivationContext

user32

ReleaseDC
SetCaretPos

advapi32

LsaOpenPolicy

gdi32

StrokeAndFillPath
SetMetaRgn
SetDCBrushColor
SetBrushOrgEx
SetBitmapBits
FloodFill
PtInRegion
Pie
PathToRegion
LineDDA
GetTextColor
GetStockObject
GetMapMode
ResizePalette
Ellipse
BeginPath
BitBlt
CombineRgn
DrawEscape
FlattenPath
EnableEUDC
GetFontData

shlwapi

PathSkipRootA

glmf32

glsGetContextPointer

Sections

.text
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 231KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ