eb1c33dba2044dae9c6d2d391729023c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb1c33dba2044dae9c6d2d391729023c_JaffaCakes118
Size

328KB
MD5

eb1c33dba2044dae9c6d2d391729023c
SHA1

b0136fc763c7feebe92041e618ed1c094cf16326
SHA256

45c2d4898969f91acb2d80bf302d4dc3e4cebcac2aaf5f6f4307ec4dd09a577f
SHA512

48293b6c8847948bff02e7f1e11aa6b2bc499a1b53e34cb7f16d0f15c2b681be90620a8b223e3c9814fec0a773bcda6fe31db3ac58d75255a788f9c45b94bab9
SSDEEP

48:SVpRg0dgnvIQTFaSuGdhSF4JDp1jOW/B1/9mX:Yo0Og0aTvF4JtV/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb1c33dba2044dae9c6d2d391729023c_JaffaCakes118

Files

eb1c33dba2044dae9c6d2d391729023c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

537b78f43bf58b95cc29bd7e740b5f78

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
ResumeThread
GetLastError
ExitProcess
LocalLock
Sleep
VirtualAlloc
GetTempPathA
VirtualLock
ReleaseSemaphore
CloseHandle
UnmapViewOfFile
GetProcessHeap
GetProcAddress
GetCommandLineA
TlsFree

user32

LoadIconA
IsChild
wsprintfA

advapi32

CryptAcquireContextA

shell32

SHGetFolderPathA

ole32

CoUninitialize

msvfw32

DrawDibTime

crypt32

CertOpenSystemStoreA

winmm

midiInClose

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wdata
Size: 180KB - Virtual size: 567KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ