2f246c9d447c0f9847bf4e862f1a4149_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f246c9d447c0f9847bf4e862f1a4149_JaffaCakes118
Size

38KB
MD5

2f246c9d447c0f9847bf4e862f1a4149
SHA1

c4616caa8c3935144a1b6af7c3705b84c7814072
SHA256

70ae1d7e3335d196c9bd4eeae9be9cacb3319ca2c6917beb6e51c9f021482f36
SHA512

0d17127a0bd47e2314d5a3ed037c06bf0e6dcf9c22ad5437fe1d41f67b5aaf07afb02a9f021ad426ae0b9068fde52e95f327b39b64afe2c53bf1d4eddc9b886c
SSDEEP

768:5gRh+fUjcKzjv1GK+94VSzmVSaVxddYZ6c4QAsD6XGWqBU:5JfUjc+vA94AeptdGbDD6XxqBU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f246c9d447c0f9847bf4e862f1a4149_JaffaCakes118

Files

2f246c9d447c0f9847bf4e862f1a4149_JaffaCakes118
.exe windows:4 windows x86 arch:x86

22f9469c59db1d4369ab5112f6116e7d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObjectEx
WaitForSingleObject
HeapAlloc
GetProcessHeap
ExitProcess
GetProcAddress
LoadLibraryA
HeapFree

user32

IsIconic
GetTopWindow
ShowWindowAsync
CloseWindow
GetWindowTextLengthA
GetParent
IsWindowUnicode
WaitForInputIdle
GetLastActivePopup
SetParent
AnyPopup
SetForegroundWindow
TileWindows
wsprintfA
IsZoomed
RegisterClassA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE