2e38e2ba0b2b664cdbd0f2408d9c2c41_JaffaCakes118 | Triage

Sharing

General

Target

2e38e2ba0b2b664cdbd0f2408d9c2c41_JaffaCakes118
Size

308KB
MD5

2e38e2ba0b2b664cdbd0f2408d9c2c41
SHA1

6ad85302a5eac8c4376ad0d8e923c71116a71621
SHA256

ac2941a03edee411c47d72ea205a2170345b130dd06bbcebd1cbbd4bb793391c
SHA512

a022b6eb3604571b690009531bb93979ec46cae98e428a9651c3c2513d67a7e0598628e407a581505dd40d4cb766f8408cec2d5dd185af4bd710d5d5dcddea31
SSDEEP

6144:bCGPiZgcoJJbJ76AfjlrTNVonw7huxtHMuOfGkJ3ZK18NVWsIjG:bCCtcgb56GnvoAMtHfOfGs3ZKNF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e38e2ba0b2b664cdbd0f2408d9c2c41_JaffaCakes118

Files

2e38e2ba0b2b664cdbd0f2408d9c2c41_JaffaCakes118
.exe windows:4 windows x86 arch:x86

875545bea89f60759b00421637fb041f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

ExitProcess
CreateDirectoryA
GetComputerNameA
Sleep
CreateThread
DeleteFileW
CopyFileW
DeleteFileA
GetStdHandle
GetCPInfo
GetCommandLineA
OpenFile
GetLastError
OpenFileMappingA
GetFileTime
CopyFileW

user32

DialogBoxParamW
GetCursor
DrawTextW
EndDialog
DrawIcon
AlignRects
IsMenu
DrawTextA
InsertMenuA
DialogBoxParamW
DrawIcon
DrawIconEx
DrawIconEx

Sections

.DATA
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 815B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.INIT
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adxt
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 194B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 238KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ