2ba249cbcae0f3f26c70eabd9fa1b43b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ba249cbcae0f3f26c70eabd9fa1b43b_JaffaCakes118
Size

37KB
MD5

2ba249cbcae0f3f26c70eabd9fa1b43b
SHA1

655dc4884177ebdf671acacd81fbf702a2ef3ff1
SHA256

e9a1501b25e743aa52b9414f1755ed037e4b612b0083256c621a4fde94e9d16d
SHA512

da6cb1bac2749489c631605ae8040ebee3b194d210f1f4e0827b02187b6f57a53298a6fc4daddb33735489229442339d844973055c8504e4913aba3a3274fb0d
SSDEEP

768:7a7Fz5nx+a+aGrILdPHjJh6j+NXZWLVlBO90bdJHl:GFzTF+aGrI51ZXZWH3dJF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ba249cbcae0f3f26c70eabd9fa1b43b_JaffaCakes118

Files

2ba249cbcae0f3f26c70eabd9fa1b43b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

47fc810afc7fd1f11ea7f7fbe17d2a40

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObjectEx
WaitForSingleObject
HeapAlloc
GetProcessHeap
ExitProcess
GetProcAddress
LoadLibraryA
HeapFree

user32

SetForegroundWindow
SetParent
IsIconic
TileWindows
ShowWindowAsync
GetLastActivePopup
GetParent
AnyPopup
GetTopWindow
GetWindowTextLengthA
WaitForInputIdle
CloseWindow
GetForegroundWindow
wsprintfA
IsZoomed
RegisterClassA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE