eb6ce035cdadb263755d8e9abc130fd5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb6ce035cdadb263755d8e9abc130fd5_JaffaCakes118
Size

113KB
MD5

eb6ce035cdadb263755d8e9abc130fd5
SHA1

89f04e5f9b2469d809e8302a3a0c33058cc119d6
SHA256

dc37cf605d468c06c27de3a17c0aca99ae2e6f2fb98fbb568938e0fb3cd33d30
SHA512

ed084468b1002b32afc232f0188a522a0576cf34048b9ce55d4508d5896018ada1b28e5231373e93aaeff32c59be83045afa08408192295c723d1fb50151344d
SSDEEP

3072:Xvlm0VBmCmjdVJ3v1ARKAsxoeHFmc8JZ5ZL:40UVZAsxJHI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb6ce035cdadb263755d8e9abc130fd5_JaffaCakes118

Files

eb6ce035cdadb263755d8e9abc130fd5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

117dd98eccdfa5591fa4a24228384b1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
QueryPerformanceCounter
VirtualAlloc
lstrcmpiA
lstrlenW
DeleteFileA
GlobalFindAtomA
VirtualFree
GetModuleHandleA
GetCommandLineA
lstrcmpiW
GetWindowsDirectoryA
lstrcmpA
CopyFileA
RemoveDirectoryA
GetSystemTime
RemoveDirectoryW
FindClose

gdi32

RectVisible
SelectObject
GetClipBox
GetPixel
LineTo
CreateCompatibleDC
DeleteDC
GetTextMetricsA
SetTextAlign
CreateFontIndirectA
SetMapMode
SetTextColor
DeleteObject
GetStockObject
SetStretchBltMode
CreateSolidBrush
CreatePalette
GetObjectA
GetDeviceCaps

user32

CharNextA
GetParent
GetDC
GetDesktopWindow
TranslateMessage
GetSystemMetrics

glu32

gluNurbsCallback

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ