2778e67829f4948ebd118cbfd1407c2c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2778e67829f4948ebd118cbfd1407c2c_JaffaCakes118
Size

500KB
MD5

2778e67829f4948ebd118cbfd1407c2c
SHA1

df05107c3be435ac4210bce42173ea99f66c6b14
SHA256

10d473aa9a6636d8f89415ff3b53da41985d55f2f160ac733ff890c75394a890
SHA512

2d2246e72589aa9eaf762125bec10e7acdc3c405569082554d1f293ea935a0c8181c5df6d670c3ce0f896edd47445d946cfa354a6b21dfe10d8b289cde62bfc1
SSDEEP

12288:ae8X3NYR/mvqqdxJ4nTWxczBOlUfGv54M3NrnC1ukiCxZbZiD:ae+YROv+TWxQMlUfQ4KNGuxC4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2778e67829f4948ebd118cbfd1407c2c_JaffaCakes118

Files

2778e67829f4948ebd118cbfd1407c2c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5281ff87471a71f23bdd20666a60ae97

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MapUserPhysicalPages
VirtualFree
VirtualAlloc
LoadLibraryA
InitializeCriticalSection
OpenFileMappingA
GetLastError

user32

SendNotifyMessageA
ChildWindowFromPointEx
GetLastActivePopup
LoadBitmapA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 257KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 991KB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ