a1ee88eb175dd22a4f7fa2acf11075f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1ee88eb175dd22a4f7fa2acf11075f9_JaffaCakes118
Size

100KB
MD5

a1ee88eb175dd22a4f7fa2acf11075f9
SHA1

3f5735680ea26d4628309dcaa1eb85aec8381da8
SHA256

bb10493b7aed5761bd93709dd766dad29e6240c7077e210bcdf3b650504f9b0f
SHA512

f57ce402501cf73b4fde18574e7e0ab35766756aa179e8cb480c405ae397f23a8ff97cfedb12b9b90a6a878990e23b5a74286653bf1cd872a62a024d5c512aeb
SSDEEP

3072:CRjvoyNQmQaS1TFVdVrLk+WbzdK15XotwYY0VzOqtjvpl:CRjvDNnAh6bQ+FzOqB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1ee88eb175dd22a4f7fa2acf11075f9_JaffaCakes118

Files

a1ee88eb175dd22a4f7fa2acf11075f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4126eb2abecd952f7e153dc34b07041d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

AnimatePalette
CopyMetaFileA
AddFontMemResourceEx
CreateRectRgnIndirect
Chord

comdlg32

PageSetupDlgW
dwOKSubclass
GetFileTitleA
ChooseColorA
FindTextW
CommDlgExtendedError

Sections

.text
Size: 70KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE