2f5753cbe2aec3a462c85f987d669e1f_JaffaCakes118 | Triage

Sharing

General

Target

2f5753cbe2aec3a462c85f987d669e1f_JaffaCakes118
Size

50KB
MD5

2f5753cbe2aec3a462c85f987d669e1f
SHA1

f20a5b94771944ff8b5905d80c002bbf6e51cc08
SHA256

f3cc6ab9167ec53e1ac5eb9540be51a506c5a860e6e4616b33b480f18ed3726f
SHA512

f71aac94a198499a9039cd328a9ebba56b58ba53ee03d2c06a9ebed670495c7c58c572919e1bfa3bcf16fe4f2705e008da052089ce0ca9d23f7f3a68ed7b73cc
SSDEEP

1536:vnDMUkgOr1xfD/4gV+2GawEXdUG2bTHJfq:vDMUdOJxL/ls2tntXWJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f5753cbe2aec3a462c85f987d669e1f_JaffaCakes118

Files

2f5753cbe2aec3a462c85f987d669e1f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3fbda3e5f9c0b2851d3d94be592f12a0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptGetHashParam

kernel32

HeapReAlloc

shlwapi

PathFindFileNameW
PathMatchSpecW
PathRemoveFileSpecW
StrCmpNIA
StrStrW
wnsprintfA
wnsprintfW
wvnsprintfA
wvnsprintfW

user32

ExitWindowsEx
GetClassNameA
GetCursorPos
GetIconInfo
GetKeyState
GetMessageA
GetWindowTextA
LoadCursorA
OpenDesktopA
SetThreadDesktop

Sections

.yred
Size: 40KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.def
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zun
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ