2f43247db071bbd0ff8655a753ff400e_JaffaCakes118 | Triage

Sharing

General

Target

2f43247db071bbd0ff8655a753ff400e_JaffaCakes118
Size

357KB
MD5

2f43247db071bbd0ff8655a753ff400e
SHA1

12e96868fd327916ce2db0da0da39c071be8d4a6
SHA256

0c45e059660783c0cb8dbd8427b77244d6f462afc2ea95e1a92b04c7db0d04b9
SHA512

93ed4cf8da78857fb7c060bf672d067247f27ad8037d3785ceafe3f67c79dd42e3f8a1563ba555a2794137b26a0e4496513fb562b5705ccd36af5576f20a8bb4
SSDEEP

6144:Qmpm9nFK7Ax+LYBrtSRbIqz+WSrLGj+wvjG+qhloMHDjFNk99p:Q7MAxQ1bH8azq0SFN0p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f43247db071bbd0ff8655a753ff400e_JaffaCakes118

Files

2f43247db071bbd0ff8655a753ff400e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

50ac0817b41afe7c655bafd29225450a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
EnumResourceTypesW
GetSystemTime
ResetEvent
LocalFree
Heap32First
LoadLibraryExW
IsDebuggerPresent
GetLastError
VirtualProtectEx
lstrlenA
IsBadReadPtr
SetLastError
GetStdHandle
GetConsoleTitleA
FreeConsole
CreateMutexA
GlobalLock
CancelIo
GetModuleHandleA

user32

GetDlgItemInt
EndDialog
CopyImage
DialogBoxParamA
CreateWindowExA
IsIconic
GetMessageA
GetParent
GetDlgItemTextA
EnumWindows
CloseWindow
GetMessageA
GetKeyState
MessageBoxA

setupapi

MyMalloc
IsUserAdmin
MyRealloc
MyFree
SetupCloseLog

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ