2e1faa03640fab69776aeaed0663e379_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e1faa03640fab69776aeaed0663e379_JaffaCakes118
Size

16KB
MD5

2e1faa03640fab69776aeaed0663e379
SHA1

0114733054fecf3753cf4447223f266809034e12
SHA256

1e5df9b4908f9973ea629fbe66e0d8cf1f2de99997ef3f94eb0d6633ada8ba7e
SHA512

bae14ab171b9c97d389c1e6fc80e1471c6a95b14b3de6c19c003a2795e28875156914952d6eba338767ae631e8b330aa3757cc34612162087ee6565403d54efa
SSDEEP

384:KxLs+WDtmbujBZeB0Y9S/HVpSoVjwdLJGg1jy5Z:aWRmgBAB0jSujwdLJGmjy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e1faa03640fab69776aeaed0663e379_JaffaCakes118

Files

2e1faa03640fab69776aeaed0663e379_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b13c69a171a4ce3beb5f96e963fd60ab

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

LookupPrivilegeDisplayNameA

kernel32

CreateMutexA
ExitThread
GetCurrentThreadId
GetProcessHeaps
TlsAlloc
VirtualAlloc
VirtualFree

ole32

CoDisconnectObject
CoInitialize
CoTaskMemRealloc
OleFlushClipboard
RegisterDragDrop

user32

ChangeMenuA
CopyImage
CopyRect
CreateAcceleratorTableA
CreateCursor
CreateIcon
CreateMenu
DeleteMenu
DispatchMessageA
DragObject
IsWindow

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 50B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ