2c7aa4b4dbf59d6f7d32738f64d1a99f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c7aa4b4dbf59d6f7d32738f64d1a99f_JaffaCakes118
Size

30KB
MD5

2c7aa4b4dbf59d6f7d32738f64d1a99f
SHA1

4bac186a15b13c223cee1026fb340e3a1479ea1c
SHA256

79bd7586264484e4cff81af21e1c47fb3fefbe12ba7a41278f6419593d270a3d
SHA512

72b8ddd2e5c0592be13a85e3a0cd09960425345a4630523876b48acffdd93dde223224d5a3c51747778b6b4c63f6ea7f5f37538435d2dffe086aeb5f00d03d35
SSDEEP

768:sB2A+KL/v5lm83nZQi21k4rCG+NSmESE0LQoK:sB2dkv5lmWZQidG+Kn7P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c7aa4b4dbf59d6f7d32738f64d1a99f_JaffaCakes118

Files

2c7aa4b4dbf59d6f7d32738f64d1a99f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

03c0ede4ab0c725451bbc8809c6be036

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
ExitProcess

user32

GetDC
GetDesktopWindow
TranslateMessage

gdi32

GetDeviceCaps

comdlg32

ChooseColorA

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 24KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE