29cd591f27f62d7fee6c6bcac5ea16c6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29cd591f27f62d7fee6c6bcac5ea16c6_JaffaCakes118
Size

18KB
MD5

29cd591f27f62d7fee6c6bcac5ea16c6
SHA1

4a87f75d4abf92aed8ee5150b62e8f113c7cf19d
SHA256

9366a18dbd97f6cc6bb6883c5ce612e1dc1a580220f0b235db991dcd3b50ad6d
SHA512

70a08c5a6900ae51dcc6a014feeec354082c6ed3b913b9d2e5bef150a65771e20598bcb3aee5557eaf2bad38ebb8c7c724cabd1361a88a41f1b42ea37c6208df
SSDEEP

96:ttmfgul/JFzsAhm8Lc12nqESlRCu4Tcf8Lxg4j5Yg3TF7CRReuGSO:6fguBJFgAh21ei8Tc0xg+Z+RRxdO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29cd591f27f62d7fee6c6bcac5ea16c6_JaffaCakes118

Files

29cd591f27f62d7fee6c6bcac5ea16c6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

db045995786d179eb45e8f97da651207

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenEventA
ReleaseMutex
GetModuleHandleA
CreateFileA
ReleaseSemaphore
LoadLibraryA
CreateEventA
GetProcAddress

user32

CloseWindow

gdi32

SetTextColor
CreateBitmap

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 97B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ