2f4a46536dcfc5e981573fea90f0a839_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f4a46536dcfc5e981573fea90f0a839_JaffaCakes118
Size

50KB
MD5

2f4a46536dcfc5e981573fea90f0a839
SHA1

dc742f6312549610aa69e5a15ad55a1b859cb04e
SHA256

1974c859c5b7afa0180908fb0dcc406debed02fdd4f99c51cd5ca823baadfb41
SHA512

c89d07a66510ff3ef5c6138ca9990d125c995ae38ee209d5b8f49bf563230a1e936e6716ee7283a655a8a276aba01e9d0fa3e7d79d191ff8cd07fb851c1b49d6
SSDEEP

768:fOPusVVzsBYqxwZIaiLy7RFpvLXuZr32BBaAriUFE0tFmvDRLCkC5HVYPCd:mmG8wcLyNFxLXKyBhXm0tFmvDSHyP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f4a46536dcfc5e981573fea90f0a839_JaffaCakes118

Files

2f4a46536dcfc5e981573fea90f0a839_JaffaCakes118
.exe windows:5 windows x86 arch:x86

81dfae505b5c9b890981ceb760efadd1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
HeapAlloc
GetProcAddress
GetModuleHandleA
LoadLibraryA

user32

EnumChildWindows
EndPaint
EndMenu
EndDialog
DialogBoxParamW
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
CloseClipboard
ClipCursor
ClientToScreen
ChildWindowFromPointEx
ChildWindowFromPoint
CreateDialogParamW
GetWindowTextW
EndDeferWindowPos

advapi32

RegOpenKeyA
RegOpenKeyW

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ