f2c9ed07197937da067d9182bf973c29_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f2c9ed07197937da067d9182bf973c29_JaffaCakes118
Size

48KB
MD5

f2c9ed07197937da067d9182bf973c29
SHA1

e1c5b5b562d625ff04e3f2206941b6bd75e5b127
SHA256

712e8110c7516359cdd2d57f198b784dbc39920dc59a1b5f64c269f8f0855c63
SHA512

0fa5e8ff2dfe6a139eef1f34c0fdaf6f99d2e505ac0d013a7d34d7aa6f4722a757f8dc4c9964a7ace9f547bfb0b715266864649c54ba43d2ace494c78b7ced23
SSDEEP

1536:0vr3L69BfAStMd8klJnnkZVhMF4mWUI82:0vQBfASfkgZVhMGnUI8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f2c9ed07197937da067d9182bf973c29_JaffaCakes118

Files

f2c9ed07197937da067d9182bf973c29_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f3e0f44afe9d9af3bf2dbdbe30691ffe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceTypesA
ExitProcess
FindFirstFileA
GetAtomNameA
GetDateFormatA
GetLastError
GetPrivateProfileStringW
HeapUnlock
InterlockedDecrement
IsDBCSLeadByte
OpenSemaphoreW
QueryDosDeviceA
SignalObjectAndWait

user32

CallMsgFilter
DialogBoxParamW
DrawFrame
DrawTextExW
GetDialogBaseUnits
GetMenuItemCount
KillTimer
LoadKeyboardLayoutW
LoadStringW
MonitorFromRect
RemovePropW
SendIMEMessageExW
SetMessageQueue

gdi32

CloseFigure
CombineRgn
GetPolyFillMode
PolyBezierTo
SetPixel

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE