12ff56f0876468075eca21667aa167d4_JaffaCakes118 | Triage

Sharing

General

Target

12ff56f0876468075eca21667aa167d4_JaffaCakes118
Size

9KB
MD5

12ff56f0876468075eca21667aa167d4
SHA1

ba2b71ea6aee9901868a03d28d2cc01ca3ae3822
SHA256

dccd8993825e8f971a3e8b5f8a65bbe122078dfe61b4a11bc07ed4e529db3e3e
SHA512

57d04f768840b2f959bb63ec3cecb3d3be41c19e35cd579a527717fff42dac0b8969e3bc690a2ae3919931fc317f2ccb4cae2b363392be5fcb202d51c861432b
SSDEEP

192:kK2HaesRcUeLN7/GrU/CAlPEfpppppppppppppppppppppppppppppog6MLu9ppP:Jk6S7/GrU/CsPEiKlpVYneZDVlACGnL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12ff56f0876468075eca21667aa167d4_JaffaCakes118

Files

12ff56f0876468075eca21667aa167d4_JaffaCakes118
.exe windows:1 windows x86 arch:x86

026d00f01a5fbf5358a1721c849e09fc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

ReplaceTextA
ChooseColorA

kernel32

GetDateFormatA
CreateEventA
CreateSemaphoreA
ExitProcess

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE