2f00b2a5c2d90af1f31a8b8061eb1fad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f00b2a5c2d90af1f31a8b8061eb1fad_JaffaCakes118
Size

23KB
MD5

2f00b2a5c2d90af1f31a8b8061eb1fad
SHA1

1eda4fb6fd1a0dd1d6c1c1cda1166ef3644ecd4f
SHA256

f8dd74c753346c22f345f4414b674ec4921ce756012b54c1ee6a9ceb99ed90fe
SHA512

54c5faa8aa945d77347a1730f784f2a3f15727794972a46a0dfd289ecf822766de7874850dbece201de66ea9adfccf3d55930db1501a0875e0fa95d82f7dceb3
SSDEEP

192:EpFdNfxqtCf/JMGxEdvwNkAXeFntrlL0bQu9PQ55FWyT5n65T43exe:EdNfxqMyVqSRxJ0bB9P2FWGnN3ex

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f00b2a5c2d90af1f31a8b8061eb1fad_JaffaCakes118

Files

2f00b2a5c2d90af1f31a8b8061eb1fad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e7613728c8036e4058dd5d20adec29c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetCommandLineA
GetModuleHandleA
FreeLibrary
CreateEventA
LocalFree
GetVersionExA
GetFileSize
GlobalAlloc
GetStartupInfoA
GetTickCount
CloseHandle
lstrlenA
lstrcatA
GetStdHandle
lstrcpyA
GlobalFree
GetLastError

gdi32

DeleteObject
ExtTextOutA
GetDeviceCaps
GetTextMetricsA
CreateFontIndirectA
GetObjectA

msvcrt

_c_exit
wcslen
exit
__set_app_type
_exit
wcschr
_acmdln
toupper
__getmainargs
__p__commode
_controlfp
rand
wcstoul
_XcptFilter
__CxxFrameHandler
__setusermatherr
__p__fmode
memmove

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ