2e1d542d8108834ed90eed69445dd931_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e1d542d8108834ed90eed69445dd931_JaffaCakes118
Size

12KB
MD5

2e1d542d8108834ed90eed69445dd931
SHA1

3b956776a3331e88c73f8af5997d330783943e64
SHA256

0a12b849d44a0e146aed3d0cf8aa605c44c27b1ef1ab18bb2422e35e9957a761
SHA512

9a06c104564afc542df468f8404d0d3eed274888b64dbe131eee67625433ffb408ced6ac3d73707091ce800496e3b6f400e83800aead05335baa2c91a9d9e87e
SSDEEP

192:+OQQAC1x/fQtNz6SKUYOJlaFc4OcT61hbusrrDooHdEvbrvoMw5Rp8gMehWGYyP:L1xkNuvUDlaGZlXbh3NibrX6RigHP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e1d542d8108834ed90eed69445dd931_JaffaCakes118

Files

2e1d542d8108834ed90eed69445dd931_JaffaCakes118
.exe windows:1 windows x86 arch:x86

09e744ec88d65ed44231c9044f6b8532

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMailslotA
DeleteFileA
EndUpdateResourceA
EraseTape
FatalExit

user32

CheckMenuItem
CreateCaret
CreateDialogIndirectParamA
CreateMDIWindowA

wininet

CreateUrlCacheEntryA
FtpGetFileA
FtpRemoveDirectoryA
GetUrlCacheEntryInfoExA
GopherFindFirstFileW
HttpEndRequestW

gdi32

CreatePalette
GdiGetPageHandle
GdiPlayJournal
GdiPlayScript

Sections

.text
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE