2e8a912bb263f865b4e74cbfde6002b9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e8a912bb263f865b4e74cbfde6002b9_JaffaCakes118
Size

38KB
MD5

2e8a912bb263f865b4e74cbfde6002b9
SHA1

7efc4ed8233f9ee77347a67f4d85c2b76e5c04ba
SHA256

bf2962ca17f44f76a4d5c6ffcd7172668e85ca5fd0752c2917605eaf87c849e5
SHA512

caa284ebc4451f95d7769f1eb4ddbaf06eca9260df0ddc420e25d014513fefba38bd4dcabdfc851eb7174a5cbd70226209cb0a34789641ff4c00941a3d041804
SSDEEP

768:swCk0CdnGsB7o20lwjsJzYcKZ3cBIecJqxrJ5kZWM0O2ZQREqQH:3GsZo2tslYTZMB368Pkd0CRni

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e8a912bb263f865b4e74cbfde6002b9_JaffaCakes118

Files

2e8a912bb263f865b4e74cbfde6002b9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a264c8b31a156266f2ce7d087bb0ed22

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObjectEx
WaitForSingleObject
HeapAlloc
GetProcessHeap
ExitProcess
GetProcAddress
LoadLibraryA
HeapFree

user32

IsIconic
ShowWindowAsync
CloseWindow
GetTopWindow
GetLastActivePopup
AnyPopup
TileWindows
GetParent
WaitForInputIdle
SetParent
IsWindowUnicode
SetForegroundWindow
GetWindowTextLengthA
wsprintfA
IsZoomed
UnregisterClassA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 690B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE