2838a2df838b70c931637e7c9a7f0e87_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2838a2df838b70c931637e7c9a7f0e87_JaffaCakes118
Size

131KB
MD5

2838a2df838b70c931637e7c9a7f0e87
SHA1

0dc5c8842752f18bf7d4440ffebf5cb6ba4a4161
SHA256

d186d68584741c171db5e53b869a5f5eeb2b22a22eebe0724856a2ed9c664436
SHA512

9428ec8e9ad573a7e6fa299b557770f2fcd72d3ee57c250262cab61e75d00007396aed17696c95b5cb9c3d35fe1cafa3cc2651d15b8faa1bca63c308ef2fc69c
SSDEEP

3072:FA0/WI83mofFk/G1vV1WwlmiC7ycVS0X4nymzt:8zxvWMi7NjInySt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2838a2df838b70c931637e7c9a7f0e87_JaffaCakes118

Files

2838a2df838b70c931637e7c9a7f0e87_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c8e6dba85bd6017e1ee81fd62cfae4fd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

abs

kernel32

LoadLibraryA

user32

GetActiveWindow

advapi32

CryptDestroyHash

Exports

Exports

ºormatDesktop@888GPAUHINSTANCE__@@U_COMMPROP@@`D
?FormatGUI@888GPAUHINSTANCE__@@U_COMMPROP@@`D
?FormatGUIMonitor@888GPAUHINSTANCE__@@U_COMMPROP@@`D
?FormatHandle@888GPAUHINSTANCE__@@U_COMMPROP@@`D
?FormatWindow@888GPAUHINSTANCE__@@U_COMMPROP@@`D

Sections

.round
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdi
Size: 512B - Virtual size: 383B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.same
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ