2f5447ced58b7ec5f4892d7fefa66332_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f5447ced58b7ec5f4892d7fefa66332_JaffaCakes118
Size

7KB
MD5

2f5447ced58b7ec5f4892d7fefa66332
SHA1

9c3e4c8eca200e6eccd8c3b608813927fd1eb0c4
SHA256

755c5a7999b3491a09e5c5e62752be992923c55755a05f427f1687c05ecaa9d6
SHA512

2dedb86d4e34531cf068414e13d46c4d068991dbdf3967b9d30df598060e4f787b367bc5debacad67cf6fe879e09ef9aab5d51e50d488a1ff0922890863d8a0e
SSDEEP

96:I8Qz1YJC3xwuMGprVwMr/mfCd8kcwm7l7AqUEVClaW/d6R01:l4Y4prCMrufccL7Tol56u1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f5447ced58b7ec5f4892d7fefa66332_JaffaCakes118

Files

2f5447ced58b7ec5f4892d7fefa66332_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6be1f6a37656af2cb8e1c2cbf8561ece

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileExA
FindResourceExA

user32

GetWindowModuleFileNameA
VkKeyScanA

gdi32

CreateScalableFontResourceA
GetTextMetricsA
DeviceCapabilitiesExA

Sections

.fasm
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.icode
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1024B - Virtual size: 814B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SHARE
Size: 512B - Virtual size: 345B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ