2b95d88fc3956ecb3a09d67f9e293b53_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b95d88fc3956ecb3a09d67f9e293b53_JaffaCakes118
Size

54KB
MD5

2b95d88fc3956ecb3a09d67f9e293b53
SHA1

a441fe28b00d33c82fabb959b78d2c6ba1dba93a
SHA256

ddd30e10f497e8b2110fbd88e97efe3f0a79d28c07d9a957f53f0ae31137f2a9
SHA512

848f6413c6d333c7cf5a1a5ab5493fa1f18fb2e29246a8a0281b16f103bc73feb12e4452281228ae55fc9056d4e3b2b74be83cd1f0bfdf8217c82526f5db51d2
SSDEEP

1536:aHLCNu9QJmuWAN6yF4PDAHUe6YFqwnT4YO2m/ZfGaR:arCNumouWm4PmUe1FfJO2Adv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b95d88fc3956ecb3a09d67f9e293b53_JaffaCakes118

Files

2b95d88fc3956ecb3a09d67f9e293b53_JaffaCakes118
.exe windows:5 windows x86 arch:x86

909eee48c7efb8f92114530c9d499608

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResetEvent
VirtualProtect
ExitThread
ExitProcess
VirtualAlloc
GetDiskFreeSpaceA

user32

SendNotifyMessageW
SetTaskmanWindow
ChangeClipboardChain
OpenDesktopA
HideCaret

Exports

Exports

Bijupfhep
SetFjswjnh
Caleyqjufj
AddQjbtybw
Mtwolxnd
Ghamhgarq
Whsslcw
Lugmitac
EndQgggqob
ReadYrheyjlngyg
GetPxuqxtswqk
ReadWtgxasyoh
EndXyrjgytkr
ReadBkowrijo
WriteWtumqqpq
Yygfbrawjq
Dhcdfnnx
Bqgvgocftb
Pwamrusdji
CloseAgmlgjddx

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ