eb86f59c8b5b2a861ea8759f75a42f7d_JaffaCakes118 | Triage

Sharing

General

Target

eb86f59c8b5b2a861ea8759f75a42f7d_JaffaCakes118
Size

77KB
MD5

eb86f59c8b5b2a861ea8759f75a42f7d
SHA1

ee76cd1b0a1c203c70581bdd7f5ef5c3fe2a4457
SHA256

d431868df67dd9926e404c8a62de3d14c80ac262c8e312ed4610640d43bc744b
SHA512

db20b68cd97443ef8aabf7204b8590bc4945b45eef45e4c8a1ec6cfddb1a554e08f6f875bc915bdbdbc4b553b3e52a11d2da25dbff4ca870c591b62f0547576a
SSDEEP

1536:THxlumK+oPpCnlB5XjZ5YHINO/AQh69UyibUqS:DumjoRCnjnGHPq91q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb86f59c8b5b2a861ea8759f75a42f7d_JaffaCakes118

Files

eb86f59c8b5b2a861ea8759f75a42f7d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fad31f70781a255567bb4e12d45470a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
HeapAlloc
GetStartupInfoA
GetModuleHandleA
TlsGetValue

user32

LoadCursorFromFileA
ShowCursor

gdi32

CancelDC
GetMapMode
SetDIBits
CombineTransform

msvcrt

__p__commode
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_acmdln
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE