2f6bb35fc8ae694f913a2d56cbfa9a14_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f6bb35fc8ae694f913a2d56cbfa9a14_JaffaCakes118
Size

188KB
MD5

2f6bb35fc8ae694f913a2d56cbfa9a14
SHA1

e297be2ab8799f661d5778a2787fef16885074af
SHA256

70a5551565faad0fbcdda96293c14eabdc4a4d5fef6067a00e663d9d9add59be
SHA512

de4815b17dc37ddf77b51ca1b1b5357228cc2d0662673508753363eb132452414685d402f63687d2107eeedcba8e3937b1a6af96ea4f719a8c6d76aa58f388b7
SSDEEP

3072:CYTr02ETLbwYC88DETt4XSrhcx0qLTMuLm2vL8ElBSBsL8TOz/6836Wmn:ZmwcRTS2hcuqLTMuTvDloBkyOz/666H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f6bb35fc8ae694f913a2d56cbfa9a14_JaffaCakes118

Files

2f6bb35fc8ae694f913a2d56cbfa9a14_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8b55febf0124bc4b87b25345f20f89a8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvfw32

ICClose
ICOpen
ICSendMessage
ICDecompress

user32

wsprintfA
wsprintfW

ole32

StgCreateDocfile
StgOpenStorage

kernel32

GetShortPathNameW
MultiByteToWideChar
IsBadWritePtr
GetCurrentThreadId
lstrlenW
GetLastError
GetThreadLocale
GetProcessTimes
LocalFree
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
GetProcAddress
UnhandledExceptionFilter
EnumResourceTypesA
WideCharToMultiByte
lstrlenA
ExitProcess
CloseHandle
GetModuleHandleA
GetCurrentProcessId
FreeLibrary
CreateFileA
InitializeCriticalSection
IsBadReadPtr
LoadLibraryA
GetVersionExA

Sections

.text
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ