2f5f199d872868597675cb5d34b62f79_JaffaCakes118 | Triage

Sharing

General

Target

2f5f199d872868597675cb5d34b62f79_JaffaCakes118
Size

352KB
MD5

2f5f199d872868597675cb5d34b62f79
SHA1

807b9b1ff96934fc5a91d4326b66d8f8df2fe569
SHA256

c053203a0d035a7badb8b22ddfb7309cddfe83a60228a0e8a757fc2c956d019f
SHA512

e13a00650f9ac311bd6c02cf5d457c004ba385288d400a41e77265bf07c575a9372520a6ecb8910cf419280f94d4a63beaa7565164b8bfcc56397b846451e8f5
SSDEEP

6144:/mT0zANEa8Li1bWlWjkoCtfwR+RwBT4M9NdX753uSUQ1sab3nOmmnHj:/u08N5qAWgko8wR54aN7mwsSzmD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f5f199d872868597675cb5d34b62f79_JaffaCakes118

Files

2f5f199d872868597675cb5d34b62f79_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5171cfbf9a75db15d88c2a44f34772f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
OpenMutexA
OpenMutexA
LocalFlags
FindClose
CreateEventA
GlobalLock
IsBadReadPtr
GetModuleHandleA
LocalFree
FreeConsole
VirtualProtectEx
GetSystemTime
LoadLibraryExW
CloseHandle
GetConsoleTitleW
GetACP
GetLastError
GlobalUnlock
GetStdHandle

user32

GetKeyState
GetDlgItemTextA
GetMessageA
IsMenu
GetMessageA
LoadCursorA
DialogBoxParamA
IsIconic
CreateWindowExA
EndDialog
ClipCursor
GetParent
GetSubMenu
MessageBoxA

uxtheme

DrawThemeText
EnableTheming
DrawThemeBackground
GetCurrentThemeName
CloseThemeData

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ