2613323983b55c56d2752c99b7b8282a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2613323983b55c56d2752c99b7b8282a_JaffaCakes118
Size

2.3MB
MD5

2613323983b55c56d2752c99b7b8282a
SHA1

1672605fedb2d36d8df411de3f2468b40d51054d
SHA256

9e7e568c55c61f3d05dd2251f539e61259f8d32ac134ee8f7d2b3ca3d79bdc5c
SHA512

e7e239b2cd2fea002386211034b404afbfd1f12a4924eded09f4c4266eb20148a310458d741e5134bb0cbb517120cd59514c47363f67b6d71b490844f61195fd
SSDEEP

49152:A0RNPjiYCCm7Own1CTDJ7lmQ5cuGYV1Cg67+5Kjwo:Amps9CJcUFG+1Cg67eJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2613323983b55c56d2752c99b7b8282a_JaffaCakes118

Files

2613323983b55c56d2752c99b7b8282a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

98d34628bf094b67da4c9263c34f512e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualProtect
SetLocaleInfoA
GetBinaryTypeA
GetDllDirectoryA
ExitProcess
OpenProcess
ReadConsoleOutputA
ReplaceFile
ExitThread
GetExitCodeProcess
GetProcessShutdownParameters
lstrlenA
GlobalFree
GetSystemDirectoryA

user32

LockSetForegroundWindow
ToUnicodeEx
GetDlgCtrlID
PostThreadMessageW
SetTaskmanWindow
LoadMenuIndirectA
GetWindowDC
SetSystemCursor
PostThreadMessageA
SendMessageCallbackA
EnumDisplaySettingsA
CreateMDIWindowA
CreateWindowExA
GetClassNameA
GetWindowThreadProcessId

Sections

.text
Size: 507KB - Virtual size: 507KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 503KB - Virtual size: 18.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ