2c465c4af583a4718c64033914089964_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c465c4af583a4718c64033914089964_JaffaCakes118
Size

100KB
MD5

2c465c4af583a4718c64033914089964
SHA1

f4604b6f8d83e27c195810575793942e1a693963
SHA256

dfdb35635671247688a0808abfdfe273c6aba122e0c80cdbd6db614ba691cd2f
SHA512

524a4493fc593bc5ba7af674e4ec857814d0d8f4cb0a2bcb9f7f92c5f7c7a9d8a150e5449d4be44bf3fb7635f1a80b0d9fb185490f11e7baf8a03fcb4f1f64f0
SSDEEP

3072:LZod8rJ4gv8cjdbvIf0+vvhS/GafJIOqtX7qN:L+qPjxvI8+34OqJIOqy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c465c4af583a4718c64033914089964_JaffaCakes118

Files

2c465c4af583a4718c64033914089964_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0b5376fa23d2011e43ca183aaf0e66f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

PageSetupDlgW
dwOKSubclass
GetFileTitleA
ChooseColorA
FindTextW
CommDlgExtendedError

gdi32

AnimatePalette
CopyMetaFileA
AddFontMemResourceEx
CreateRectRgnIndirect
Chord

Sections

.text
Size: 70KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE