2dccdc88357a8cec0bc09147210770db_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2dccdc88357a8cec0bc09147210770db_JaffaCakes118
Size

5KB
MD5

2dccdc88357a8cec0bc09147210770db
SHA1

d4faeaf17950fd04ce1b7aba6c5da2a6804487f4
SHA256

627a50cd1022f9118b1806729d9e039963eac4e4d52fd39ae3d937c3a567bf09
SHA512

1923c329f43e725024b4ea6bac19e83ab5899f2971fe678fcf5675009c9684ee884b2d1c2941368d8e894c4eb0d69e6f28286f3081b68a63125d0ee56dab7813
SSDEEP

48:6XAcfEXpbRMLFBYUp719awf+/qBLWwCfEtmCaOGEt57wNgS6eUTtMdFAjqVMWNBE:G1fEXpaY819J+/iJCyR7wN+IiHWNBAj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dccdc88357a8cec0bc09147210770db_JaffaCakes118

Files

2dccdc88357a8cec0bc09147210770db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d1a942f88e1703e380a63723acebbebf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNamedPipeHandleStateW
GetVolumeInformationW
FatalAppExitA
GetProfileSectionW

user32

GetWindowTextA
ChangeMenuW

gdi32

GetGlyphIndicesA
RemoveFontResourceW
AddFontResourceExW

Sections

.code
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.share
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.masm
Size: 512B - Virtual size: 393B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ