ec065052ebd9021c50c24c350b53ff91_JaffaCakes118 | Triage

Sharing

General

Target

ec065052ebd9021c50c24c350b53ff91_JaffaCakes118
Size

119KB
MD5

ec065052ebd9021c50c24c350b53ff91
SHA1

e9e1682111b815a15198edb8c8213c2ede3d68fc
SHA256

30f9547ccae47c7904ab37c6db0a69e33ae72417520b0eb5f8e6ebeabddc1fbd
SHA512

e3ad925e3659b8a88a12c450b4846f65c86762a7d426f4c136b76ba0c8b89dc0bf029466894a46e10e442fd22b2b4885e9a050b9be7dbe80a1283e16012a98f8
SSDEEP

3072:rxOJ0zamWzz0z0w35QAS1w2dVOabAe9oZ7Ec9Fp7bn:rxOJ0+mWzgzryAS1dT0e6lEKFt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec065052ebd9021c50c24c350b53ff91_JaffaCakes118

Files

ec065052ebd9021c50c24c350b53ff91_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3210f3334bca00ee4f43fdcb5203a8f3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateFileMappingA
FlushViewOfFile
GetFileSize
GetModuleHandleA
GetStartupInfoA
MapViewOfFile
SetEndOfFile
SetFilePointer
UnmapViewOfFile
lstrcatA
lstrcpyA
lstrlenA

user32

DefDlgProcA
DeleteMenu
DestroyIcon
DialogBoxParamA
EndDialog
GetActiveWindow
GetDlgItem
GetSystemMenu
LoadCursorA
LoadIconA
MessageBoxA
PostMessageA
RegisterClassA
SendMessageA
SetDlgItemTextA
wsprintfA

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 112KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ