23ee7f833312d08a78ccc3eef8bb6192_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23ee7f833312d08a78ccc3eef8bb6192_JaffaCakes118
Size

200KB
MD5

23ee7f833312d08a78ccc3eef8bb6192
SHA1

5cee19accd42b0f7ea28839a34962edb5c1f266c
SHA256

fa2bd4480c83804426830d6d3ec41232322c605425e63154ac8d01300b87da9c
SHA512

2e9fd16be377eb0a1a183f504d929f10e563123b69b4e93df4400e2be177390eb738f27d92180c49e469ad691304b8d4eedbe06da1e9cbe67751b2f86d78efb9
SSDEEP

3072:q4JYhZenQgw/BKHHb20xiTnb8HSI0X2f1YuGcOLd2H:gsBab8yIte

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23ee7f833312d08a78ccc3eef8bb6192_JaffaCakes118

Files

23ee7f833312d08a78ccc3eef8bb6192_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

AlphaBlend
GradientFill
TransparentBlt

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ