eb3bf30e7490deb539347786ccb5317b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb3bf30e7490deb539347786ccb5317b_JaffaCakes118
Size

480KB
MD5

eb3bf30e7490deb539347786ccb5317b
SHA1

9e0763a864e38ec163e717b80985f2ad14ae5789
SHA256

c9b70042815e5c01da1154e6ba87471b556f0e149610651fd5cf302ca247d537
SHA512

ba7733c442e0ea181127358b6f8b0a8885bb428192b67e7534c17ef7413d4bc10dcba92205e571ffbff56759047e2ba9f7c4d40247d9d65856213d91e08bf507
SSDEEP

6144:xQSpUFU7ryP3vybLplDxy2P5LLJ/h2ZgQyn2oNygOyeEJfMfc73yzKD4czrTLI0h:/0WVl5L9/h2ZZoROyeXfGQMx/e5K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb3bf30e7490deb539347786ccb5317b_JaffaCakes118

Files

eb3bf30e7490deb539347786ccb5317b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9be550974960f8d2c4e45914f3c6c1ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DdeUnaccessData
GetClipboardSequenceNumber
GetMessageTime

ntdll

NtRegisterThreadTerminatePort

advapi32

ImpersonateLoggedOnUser

shell32

InternalExtractIconListA

Sections

.text
Size: 475KB - Virtual size: 476KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE