2f18e4cb87ab0d1c08f3265ca7fc8ae3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f18e4cb87ab0d1c08f3265ca7fc8ae3_JaffaCakes118
Size

121KB
MD5

2f18e4cb87ab0d1c08f3265ca7fc8ae3
SHA1

5f20ced298e79de2aa43146e5c57aefc84cd6f3c
SHA256

b8bb56e09e2b47d72140ae7ea5f6b705e8fb113c0054e4cd208ca4c605dcf6bf
SHA512

cf7108b139b92cb96f64801f866cee2dab4b527b63544759f4aed812adb3e92b427a0a0ecbcc419dffaf0bbb400ed10d5c561ecd1c54de8c4acf737b38994f3d
SSDEEP

3072:G1S2zy6f8wwuDyZTYXWJtcL2kcbRNgEerMtMoh7PU+:IjzT8wT2ZYEk2kO7g3rsphLh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f18e4cb87ab0d1c08f3265ca7fc8ae3_JaffaCakes118

Files

2f18e4cb87ab0d1c08f3265ca7fc8ae3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

364b6ea79d1c023cd3554d095c535e1f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

BuildTrusteeWithNameW
CryptAcquireContextW
CryptEnumProviderTypesW
CryptSignHashW
ElfBackupEventLogFileW
ElfOpenEventLogW
RegOpenKeyA
FreeSid

gdi32

GetBoundsRect
GetCharacterPlacementW
GetMetaRgn
GetDIBColorTable
GetFontAssocStatus
GetMetaRgn

user32

CheckMenuRadioItem
CreateIcon
DragDetect

Sections

.flat
Size: 13KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 75KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE