2eefcf1e47d30a864b7f8633d4a3cec6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2eefcf1e47d30a864b7f8633d4a3cec6_JaffaCakes118
Size

132KB
MD5

2eefcf1e47d30a864b7f8633d4a3cec6
SHA1

4dd5630efcc59c5280f4fc1b3ed7a1ff6de3cbbe
SHA256

b429e7d3dbdf01f9a337ec469a4d0e4ac1f53619909bc1036c31fd6fc95d1d79
SHA512

f379d23b58800b9ce32b755e774706eaf9bb3742a9fd40502b1327230556f6e11c318170fb1c173275bf193bb15d3cc1373a59700dc5391b4a93fd63f45ecfe2
SSDEEP

3072:k/QlEWDIA4aMRaQYYuqY8ZCszO6ZaXXLjEEvM:vlEGIrUYc8QszO3H0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2eefcf1e47d30a864b7f8633d4a3cec6_JaffaCakes118

Files

2eefcf1e47d30a864b7f8633d4a3cec6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE