2ee0fbc44d965c8461bd5eb86610c51c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ee0fbc44d965c8461bd5eb86610c51c_JaffaCakes118
Size

42KB
MD5

2ee0fbc44d965c8461bd5eb86610c51c
SHA1

302fe1644a7eda98b58772a4fad39c80416a4874
SHA256

12460d10fc7ca1f73727d86615f2e99af47738f5a2a2b035c3a38827f4e92dbb
SHA512

cbd0e8730155ec44b143efb5e96e4f87a2f4ca540bba8df85f18a5ac02f47720ab33071fbfba3b7d41933446882ed3af5a0af5ea8b897f833321674f66ce1946
SSDEEP

768:1KMGEOfhx12BIG12VYOqVZ85SpzwPm4ZAfdP1jpiomO3j97u:1ZIhXmKqM5xeAAfd7ioN3B7u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ee0fbc44d965c8461bd5eb86610c51c_JaffaCakes118

Files

2ee0fbc44d965c8461bd5eb86610c51c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

005da23313823388fb28cd48bf823311

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
GetProcAddress
LoadLibraryA

user32

SendMessageA
AttachThreadInput
SetWindowPos
SetForegroundWindow

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ