2fdc43efd32e2f6f3f3fe38052b7d084_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fdc43efd32e2f6f3f3fe38052b7d084_JaffaCakes118
Size

153KB
MD5

2fdc43efd32e2f6f3f3fe38052b7d084
SHA1

650a154deac8a2950a4ad8ae5dd5bd6b4451a583
SHA256

fa58f104b4dd58bbf65d43086d9c609ed5207fa7d41fd71e2dc7b36361ec451c
SHA512

7bd7b0cd94a346b28f3b3c95c5710453491f25702432bebd5c486d67e7e16f0769faa6d5bcc5b51397721fc0b03a6671a25402c653afb7119ab3c31c869c022d
SSDEEP

3072:h+ueinVN0JGIWlsfEhTYZ8Z2Hqc/ov96qQMMW9KqWJt963Uq4L8Rdq:zeiVNwGBlN1YZ1qc/Q6qgW9clBLEq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fdc43efd32e2f6f3f3fe38052b7d084_JaffaCakes118

Files

2fdc43efd32e2f6f3f3fe38052b7d084_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7265ea5e39bf66c4543026211aa82305

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
fabs
ceil
malloc
floor
free
fclose
memcpy
_CIpow
strlen

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersionExA
HeapAlloc
HeapFree
TlsAlloc
HeapReAlloc
GetLogicalDriveStringsA

user32

CallWindowProcA
SetMenu
DestroyMenu
FillRect
DestroyIcon

gdi32.dll..

GetObjectA
CreateCompatibleDC
GetDIBits
DeleteDC
GetObjectType
CreateDIBSection
DeleteObject
SelectObject
BitBlt
CreateBitmap
SetPixel
GetStockObject

winmm

mciSendCommandA

Sections

.code
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ