ec2fc55491ad645047791e2a44fb0298_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec2fc55491ad645047791e2a44fb0298_JaffaCakes118
Size

439KB
MD5

ec2fc55491ad645047791e2a44fb0298
SHA1

9cca3fa0937db72422b6a71edeb64140cf8939c4
SHA256

c00967df7983cbdf33a3101e5acd1c7fb67b555405e8adbfb9e2e6190c85f214
SHA512

b24023c5726ff1cccf6fe08fb3f67dd247561ec0c08eacdf8b2c56531bc6b1195ac306479954f3c8bbe4849b5d25289a4190e55a41f2e25db5d42adabcc19141
SSDEEP

12288:CrH/uc67he+QVctK4m8jSAZvhfuGTyPxK9:CrH2S45hfVTcK9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec2fc55491ad645047791e2a44fb0298_JaffaCakes118

Files

ec2fc55491ad645047791e2a44fb0298_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ae60642d028a44d03e35ec805f4be756

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

HeapAlloc
HeapReAlloc
HeapFree
HeapValidate
HeapWalk
GetCommandLineA
GetProcessHeap
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InterlockedIncrement
QueryPerformanceCounter
RaiseException
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
SetLastError
HeapSize
ExitProcess
TlsGetValue

setupapi

SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces

user32

GetWindowTextLengthA

gdi32

GetEnhMetaFileW
EndPage
StartPage
EndDoc
StartDocW
RealizePalette
GetBkColor

Sections

.text
Size: 247KB - Virtual size: 247KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 183KB - Virtual size: 466KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ