2f4c8dd6b138ca9026d062492d74f306_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f4c8dd6b138ca9026d062492d74f306_JaffaCakes118
Size

32KB
MD5

2f4c8dd6b138ca9026d062492d74f306
SHA1

44e55408ac6e9b5cae473bd11c56ce80925db382
SHA256

e4eca5060a18510f209b501152c8fde92cf56ad2055646c521bc61b4060999a3
SHA512

0fdf97569a45ec6893472641900a302f41849a6020c072cd3ab61ed858b90f6bce8525fc7e530bf51d803dfb2b8c4f8e103b9f3b6a61ed991e2c9da0d599883a
SSDEEP

384:dhVFt2LMY1TmFy2G/zxtY9cdN7VyyAnw0CUdA7sFbhC4UtjhPjgII6vQKOHmT15:dJMf1TmUTdtGcsyAnw0h+mbgrhMI2q5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f4c8dd6b138ca9026d062492d74f306_JaffaCakes118

Files

2f4c8dd6b138ca9026d062492d74f306_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ab2eb3938987f9960e0329d95284f02c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyIcon
MapWindowPoints
SetUserObjectSecurity
RealGetWindowClass
MsgWaitForMultipleObjects
CheckDlgButton
DdeReconnect
SetWindowTextA
PrivateExtractIconExA

kernel32

GetLastError
VirtualProtect
OpenSemaphoreW
GetStringTypeExA
GetNumberOfConsoleMouseButtons
SetEnvironmentVariableW

gdi32

PATHOBJ_vEnumStart
GetGraphicsMode
SelectPalette
GetICMProfileW
CreateFontA

comdlg32

ChooseFontW
FindTextA

Sections

.text
Size: 4KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE