564db9216107d02fbc839d5ef6ade2ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

564db9216107d02fbc839d5ef6ade2ae_JaffaCakes118
Size

9KB
MD5

564db9216107d02fbc839d5ef6ade2ae
SHA1

ec72d2dc1ea2c902df51cdcf8b8611b6be4b753f
SHA256

bcdb9eed022693ec152f57314bf04d88b8176d6aef8506cfff2bcd7637806951
SHA512

d8fe6b81705d16a65a6f196a6c04ae3f9c3735c7d79a8475fbc1b028cb35a99db9380bf10ee34cf95d30ffb704edc5400c468f9c5890a2c1456f35ed437c4b0f
SSDEEP

192:zKZ2TBTl+OeByEfPBlWC4B3DrVtfuJxEuepjbDK1x+l8FppnQ:OITBwOedTWjxVCxEtZDVlInQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
564db9216107d02fbc839d5ef6ade2ae_JaffaCakes118

Files

564db9216107d02fbc839d5ef6ade2ae_JaffaCakes118
.exe windows:1 windows x86 arch:x86

026d00f01a5fbf5358a1721c849e09fc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

ReplaceTextA
ChooseColorA

kernel32

GetDateFormatA
CreateEventA
CreateSemaphoreA
ExitProcess

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE