ea1b97ad4824f687e36710b7d8563472_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea1b97ad4824f687e36710b7d8563472_JaffaCakes118
Size

66KB
MD5

ea1b97ad4824f687e36710b7d8563472
SHA1

f1c6823d3105a2deb4984a45cb37c1fd0e566646
SHA256

c82d9a66ecff801bce30f6eedd1f8a01bdf47e4d025599024e06a2b357bbb9dd
SHA512

50ed4c4495ca8ddab1115d9ead294865f91ff22896ab988aa36b0ad5e6e3e5caf04041ce42696906eedd08a94f6a78a162c371eef1f99f92cc168ca73772ecfb
SSDEEP

1536:SPQGUspAgxwQZPz5yQPmi+Q2c/K07k0+G70S:LY+QZMQ+iHi0J7p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea1b97ad4824f687e36710b7d8563472_JaffaCakes118

Files

ea1b97ad4824f687e36710b7d8563472_JaffaCakes118
.exe windows:5 windows x86 arch:x86

16ae9715acbf48a04ad79fca941ca689

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
CreateFileA
GetCommandLineA
GetStartupInfoA

user32

LoadCursorA
RegisterClassExA
CreateWindowExA
DialogBoxParamA
GetMessageA
LoadIconA

gdi32

CombineRgn
ChoosePixelFormat
SetWindowOrgEx
EnumEnhMetaFile

shell32

SHChangeNotify
SHGetPathFromIDListW

shlwapi

StrChrIA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT2
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 554B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ