eb3b3fde14de5b42d3fa04c573c7be20_JaffaCakes118 | Triage

Sharing

General

Target

eb3b3fde14de5b42d3fa04c573c7be20_JaffaCakes118
Size

191KB
MD5

eb3b3fde14de5b42d3fa04c573c7be20
SHA1

bad41dcb7af65ca641d9156c224a5f338664e070
SHA256

9479920df0b9416a79b8d469c13de69f145fc7ba912ad91021412c50f57cdcee
SHA512

ff1053323fc65bde2efcb0376bc2805bc831c9df275bbd7b3270f2243ec0f1cb39d19ff4f585db053585c3497791c57f19551aa9289c4600b6900774b9038129
SSDEEP

3072:1qBVF0z38Lx7Rkw8WmNUsbiQlEXmtabafBausKPtgoLrF8KaP6Dbm6fuTCufQjGg:1qBzQ8LxlnSdiWtRP/XOUbvfuueyQ0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb3b3fde14de5b42d3fa04c573c7be20_JaffaCakes118

Files

eb3b3fde14de5b42d3fa04c573c7be20_JaffaCakes118
.exe windows:4 windows x86 arch:x86

161978b927eea14ac52f3efd82e6d9a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemInfo
FillConsoleOutputAttribute
CreateToolhelp32Snapshot
GetConsoleInputExeNameA
GetDriveTypeW

user32

SetCursorContents
GetClassLongA
GetKeyboardLayout
SetFocus
SetMenuItemInfoW
SetMenuItemInfoA
GetShellWindow
DrawEdge
GetClipboardOwner
GetQueueStatus
DdeCreateStringHandleA
UnregisterDeviceNotification
GetDC
DrawCaptionTempA
SetParent

gdi32

ExcludeClipRect
GdiDeleteLocalDC
GetCurrentPositionEx
STROBJ_bEnum
GetCharWidth32W
GetTextExtentExPointW
AbortPath
CreateFontA
PATHOBJ_vEnumStartClipLines
GdiEntry16
CLIPOBJ_cEnumStart

Sections

.code
Size: 9KB - Virtual size: 810KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 177KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pack32
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ