2fc8d0a37af5c889cadb6ffa1b486f03_JaffaCakes118 | Triage

Sharing

General

Target

2fc8d0a37af5c889cadb6ffa1b486f03_JaffaCakes118
Size

77KB
MD5

2fc8d0a37af5c889cadb6ffa1b486f03
SHA1

eb0306b5e856a728ba0b049f1858f6b8726c5423
SHA256

d2db82a9e88c4f0efc009ee7eb80557e89c80ea09f78b006cd56f522e758b011
SHA512

49bbea71825f6b8a210af2b87b9c3123411e96d7d7ac7d3f09b5e521aafb8e2c71dbd8b52fab9d86a3bc529b67000ef51d545769438907184198b96cb736c21d
SSDEEP

1536:GF2AZ7X7mLqxVDwzblEdFWLbMoUbmq0VSDhpIg3PuYAvGnV3veE15YdN:SrmLWKzblEzQqDnd33Pu1v25veE12dN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fc8d0a37af5c889cadb6ffa1b486f03_JaffaCakes118

Files

2fc8d0a37af5c889cadb6ffa1b486f03_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f780fbd587916eed698a21d7a0cfc24c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTime
lstrlenA
GetTickCount
lstrcpyA
GetLastError
GetTempPathA
FindAtomA
CloseHandle
WriteFile
CreateFileA
GetLocalTime
lstrcatA
lstrcpynA
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
GetVersion
LoadLibraryA
GetTempFileNameA
CreateMutexA
OpenMutexA
ExitProcess
lstrcmpA
GetCommandLineA
RtlUnwind
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

user32

wsprintfA
EqualRect
ClientToScreen
GetCursorPos
GetCaretPos
GetFocus
InflateRect
IsWindowVisible
GetWindowRect

shlwapi

SHGetValueA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE