2f844d104ddd7a8f8003a25828394fd8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f844d104ddd7a8f8003a25828394fd8_JaffaCakes118
Size

118KB
MD5

2f844d104ddd7a8f8003a25828394fd8
SHA1

581a7eccbf4665c914ea46d5b102a5d1f361de17
SHA256

20ef9106626a1c34b06b7f29aa416e0d1e3f970b0c9db476a09a847e947b3431
SHA512

8c43f129530362b848e548ad5f625192d655d5293931ca3be09636a54b0249cdeef959597def9a12629731b64ea4dd38499ef44c60886041904d802b684fb5f2
SSDEEP

3072:/qp0t+NRFwyBx0k7cQRO9z+Uu3KOtXf+0zjCgrWp2kV:/e0ARFwiyQQY/Xf+0zmTR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f844d104ddd7a8f8003a25828394fd8_JaffaCakes118

Files

2f844d104ddd7a8f8003a25828394fd8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

965870a5971e43198ace486acadb4358

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\vfgu\igakAN\Aduyp\ADhvgw\rtYbqq.pdb

Imports

user32

CharToOemBuffA
GetClientRect
UpdateWindow
SendDlgItemMessageW
GetWindowDC
SetForegroundWindow
GetCaretPos
CharNextA
GetIconInfo
ChildWindowFromPointEx
mouse_event
SendMessageTimeoutA
InsertMenuItemW

shlwapi

StrStrIW
PathFindFileNameW
StrToIntW

ntdll

_wtoi

kernel32

GetCurrentProcess
TerminateProcess
ClearCommError
lstrcpyW
lstrcatW
SetHandleInformation
SetPriorityClass
EnumResourceTypesA
ClearCommBreak
SetFileAttributesW

comdlg32

ReplaceTextW
FindTextW
PrintDlgW

gdi32

GetSystemPaletteEntries
BitBlt
LPtoDP
GetBkMode
CreateBrushIndirect
GetNearestColor

Exports

Exports

?UpdateProcThreadAttribute@@YGXKPAD@Z

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 114KB - Virtual size: 445KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ