2e456015d1c414fd22f1747937cfad7a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e456015d1c414fd22f1747937cfad7a_JaffaCakes118
Size

54KB
MD5

2e456015d1c414fd22f1747937cfad7a
SHA1

ca9eec03d0aa091a58d2d0dfe1ba7d974f1ee220
SHA256

bd40a4744aa703e5e8914c0a3ca9de1a7b284e220a0e2217c529e37a8fa782e4
SHA512

76a28aa3d40314a0a56ed6562663fef4809fd6eea75ad558bf7b11c5b287da08d7cdff294a1a59570e92884c55e02bc20955cb794d6a3d9f48fb35165a6aabad
SSDEEP

1536:NImLf1bkPbZ8RbPJTEz+ZFCgVXyOZSD4n:Nnf1b5bPJbZEDOZSUn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e456015d1c414fd22f1747937cfad7a_JaffaCakes118

Files

2e456015d1c414fd22f1747937cfad7a_JaffaCakes118
.exe windows:1 windows x86 arch:x86

5567887dad05325d92d01c6271adb9b8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlen
VirtualAlloc
VirtualFree
GetProcAddress
EnumSystemCodePagesA
GetModuleHandleA
ExitProcess

user32

DialogBoxParamA
GetDlgItemTextA

gdi32

CheckColorsInGamut
ColorMatchToTarget

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 25KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE