de7b9a378de4cd5da05a462daf83586d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de7b9a378de4cd5da05a462daf83586d_JaffaCakes118
Size

55KB
MD5

de7b9a378de4cd5da05a462daf83586d
SHA1

9f9570cc346986f41188080a5a658e0872c9d7e6
SHA256

6d5d59b6af57f3e24a421f2bf6872b95f0976e3155a2024a09bad490b7f4f9f0
SHA512

dfdeadb1331d0cfcbcd12e8fbfb7816b8cedee06d41e8d2da619bb86231650f4d15c93f6a62fb29e98effce5c5aa9353e070ae82c1a99dde8f33e66343271d90
SSDEEP

1536:YB/vX8zONi7A7nR2Gg2ckQsT0Ubr8SPFGX:UDNLnprasTGSPFGX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de7b9a378de4cd5da05a462daf83586d_JaffaCakes118

Files

de7b9a378de4cd5da05a462daf83586d_JaffaCakes118
.exe windows:1 windows x86 arch:x86

7dd0dede54cfa1abb87017b7261c3981

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDateFormatW

user32

SetWindowTextW

Sections

.text
Size: 50KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

.reloc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ