2bf5c45177a19f5fec973497ac4048af_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bf5c45177a19f5fec973497ac4048af_JaffaCakes118
Size

196KB
MD5

2bf5c45177a19f5fec973497ac4048af
SHA1

bcefafa55a609643c28f142eaaea9d86a50b7d43
SHA256

e521c829733300ee59e44e8ddebd385c2a32bf8ed853542d0ae9bde5a5e4abcf
SHA512

873340438d615ffed02fe6e4fb2abeb02880672bbb3311d72c739ae23aa300bcc0b00740a0b1a9d6fd943c044836c33756e2cfc91ce82953f4b966c5b016bd7c
SSDEEP

3072:K9a4UMzShJ9mOQ/lpbWarlww6g4Y/RAyaHmySubxk7pn6ta9pMn+WYs+xPCUZKkX:KYZMO9mOuzSw6ggyCSua7l69t+xPT3Ew

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bf5c45177a19f5fec973497ac4048af_JaffaCakes118

Files

2bf5c45177a19f5fec973497ac4048af_JaffaCakes118
.exe windows:5 windows x86 arch:x86

703b79c6cb7b566b1ea5d06939bd229d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SwitchToThisWindow
ShowCaret
GetDlgCtrlID
MapDialogRect
EnumWindows
IsZoomed
SetWindowPos
GetMenuItemCount
InvalidateRect
MessageBoxA
GetShellWindow
EqualRect
GetKeyboardLayoutNameW
RemovePropW
GetMenuItemID
AdjustWindowRect

shlwapi

PathIsDirectoryEmptyA

kernel32

FindCloseChangeNotification
GetThreadContext
IsDBCSLeadByte
WaitForSingleObjectEx
AddAtomA
OpenSemaphoreW
EnumResourceLanguagesA
FindResourceExW

gdi32

GetTextCharsetInfo
ExtTextOutW
GetRgnBox
Ellipse
ExcludeClipRect
ScaleWindowExtEx
TextOutA

Exports

Exports

LoadMutantExW@8
ShowTimerNew@4
DeleteWidthExA@12
IncrementExpressionExA@16
FreePointer@12

Sections

.text
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.cud
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ