2eb72b4a976e6475b6be28e1d77b4aab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2eb72b4a976e6475b6be28e1d77b4aab_JaffaCakes118
Size

285KB
MD5

2eb72b4a976e6475b6be28e1d77b4aab
SHA1

31b37dee2638778560730d0a29513b06d29ed613
SHA256

b4da414fb8f2a2c7b394e99acc39df181c551e069c2e826be056767c0f021ba4
SHA512

9e9984bacaf9e84476fe7e24781489f0c61041b24acd6c68d994a2ec964df0ccf05d26c06035ac4a0f5fe1ffce6080a5e5acc290b51e841fc168960bea30ce30
SSDEEP

6144:Vye89bAfcB6SRzKaFfn38g4Ux/s5X2PJIiT+BdW1JC:Ue89bAfcXX/38g4G/sMBf6BdyJC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2eb72b4a976e6475b6be28e1d77b4aab_JaffaCakes118

Files

2eb72b4a976e6475b6be28e1d77b4aab_JaffaCakes118
.exe windows:1 windows x86 arch:x86

26b023339d1f113a3c789ef6d59c3989

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime

user32

SetWindowTextW

Sections

.text
Size: 279KB - Virtual size: 460KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

tipv
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE