2de28143a647be179de143a1e5f894b2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2de28143a647be179de143a1e5f894b2_JaffaCakes118
Size

9KB
MD5

2de28143a647be179de143a1e5f894b2
SHA1

ca85ac5297eb1619d297199791e0c9a4f6ecc787
SHA256

1ecfb7164675f60dcb0610be71e3263d117add1fdb34b619051f6fd19652b8ce
SHA512

82f95bf4177831bbe49933a48db58ba06560d7d0ffa7fc63dad96cdcf994e6e3542105d2d568d80bc286b445e08d39370ca8655c9c562e6c62c972ba8039ca1f
SSDEEP

192:QKrI1qOTHzlB4JY2jwdbT8A4jBaqPTJgnurpjbDK1x+l8FFYQnB:9rIVHRBsY2MlupPTJlrZDVlMnB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2de28143a647be179de143a1e5f894b2_JaffaCakes118

Files

2de28143a647be179de143a1e5f894b2_JaffaCakes118
.exe windows:1 windows x86 arch:x86

026d00f01a5fbf5358a1721c849e09fc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

ReplaceTextA
ChooseColorA

kernel32

GetDateFormatA
CreateEventA
CreateSemaphoreA
ExitProcess

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE