2e90e513570591766c8dbb1ff3790468_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e90e513570591766c8dbb1ff3790468_JaffaCakes118
Size

114KB
MD5

2e90e513570591766c8dbb1ff3790468
SHA1

74d57960cda7f30014a3d199887efff640b429a0
SHA256

d400818c13a806c8a53a514a4e7b0991eae2a8e14d0712b040aa06d0042f9104
SHA512

ab09afd07233950eb87cfddcebdda908480004397915dac6aa874011c6feecea99d31ff4b1dd01a6258bf617378f7233c549647c92cf757bc99fc8323ab59766
SSDEEP

3072:aqa3aTj24Ie9G2IimjoM62U3Zg7DHR7p9+OorJl:aqa3aTv9GzoSZPHlp83

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e90e513570591766c8dbb1ff3790468_JaffaCakes118

Files

2e90e513570591766c8dbb1ff3790468_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1b6f71e5fa7c99d95bd8b74522c1d546

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

ReplaceTextW
CommDlgExtendedError
FindTextW
ChooseColorW
GetOpenFileNameW
dwLBSubclass

gdi32

GetFontData
GetEnhMetaFileW
GetMapMode
GetClipBox

Sections

.text
Size: 68KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE