2ae3502ceb5969fe7816b65625bbcdf1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ae3502ceb5969fe7816b65625bbcdf1_JaffaCakes118
Size

275KB
MD5

2ae3502ceb5969fe7816b65625bbcdf1
SHA1

79ea61eab2b0bbb2a0d268422b13e5fe1f5a1ab3
SHA256

93c44c3829c543e722164cfb32b34801a26509620fce26225aa0bb960a540b29
SHA512

72d554ec0830dc2b56ce8b4f14b9fc19828949cc8cf72ecfd949f2aeb31e4c1f0b2cee53d6313604e81316b4fc7ba825c33953b591af8c0664a1507dff574018
SSDEEP

6144:DPrG15/GU++57jj+OG2P4x3KG2v+ZUsIo5l5:nG1hG/Uj+T849nZUsx5l5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ae3502ceb5969fe7816b65625bbcdf1_JaffaCakes118

Files

2ae3502ceb5969fe7816b65625bbcdf1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

31ec89ab99978dd73344a007d0e54282

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamA
GetActiveWindow
GetDesktopWindow
EnumChildWindows
SetWindowTextW
SetWindowTextA
IsCharAlphaA
SetDlgItemTextW

ole32

CoRevokeClassObject

comctl32

InitCommonControlsEx

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

kernel32

DeleteCriticalSection
LoadResource
GetTickCount
GetDateFormatA
InitializeCriticalSection
GetStartupInfoA
HeapFree
FindResourceA
ExitProcess
HeapCreate
GetProcAddress
FreeLibrary
LoadLibraryA
LocalFree
IsBadReadPtr
LocalAlloc
HeapDestroy
SetFileAttributesA
GetNumberOfConsoleMouseButtons

Sections

.text
Size: 263KB - Virtual size: 263KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ