2f454f1a466875f08155a5fb627c0b17_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f454f1a466875f08155a5fb627c0b17_JaffaCakes118
Size

188KB
MD5

2f454f1a466875f08155a5fb627c0b17
SHA1

49e5ea2cfe6a8da4f25db1d62d7885d696f26a8c
SHA256

e83cd370a92d0de5152bf02138d74ea744a1538887287cf2125a60a6e4229053
SHA512

e557de4a165f8cbb277987ca504326fd800a030afb064c9dc35230f8996f905a4a428a78a435b26aafa406c886b3898940e99f739fef1d3644f6e60d5bb4e17c
SSDEEP

3072:VuV9m+lbQE3bEnIMdMmrFk4UtfzatN9si74p1G92xMVHIko3inztccMdsAt:gs+L3bEnRMmrazY9F74pK2xMdIkoSnzx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f454f1a466875f08155a5fb627c0b17_JaffaCakes118

Files

2f454f1a466875f08155a5fb627c0b17_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d20c2ba4d46e5c533baca63b70c01a8d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

lstrcpynW
GetStartupInfoA
CheckRemoteDebuggerPresent
TlsAlloc
EnumResourceTypesW
InitializeCriticalSection
TlsFree
TlsSetValue
TlsGetValue
GetFileType

winspool.drv

DocumentPropertiesW

user32

GetAncestor
CreateWindowExW
GetDC
LoadCursorW
RegisterClassExW
MessageBoxW
GetWindowInfo
EndDialog

Sections

.text
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ