eb8ef81aa90adb59843cb2f1ae29f6a9_JaffaCakes118 | Triage

Sharing

General

Target

eb8ef81aa90adb59843cb2f1ae29f6a9_JaffaCakes118
Size

268KB
MD5

eb8ef81aa90adb59843cb2f1ae29f6a9
SHA1

604346cee0a583ac4a05f13c77af6a9b54bfca9e
SHA256

1c8ac9c57b64711376919b6c1150ac49d046d19d64bcd20d2e403c52ae209bd6
SHA512

78c67d3d3b219a88370def3c3c0468bfc3cde4a9df3b29e196d0b0930576a7dc49d42657d6da4f06168d03871ab41c899e87594d5939a8cb0f474db64a5e2b9c
SSDEEP

6144:j1ypgwVGt1e6Ezufw6K6hQtgLB1XHE9g+koz+ZcIf:htAVufw63hQtyB1XE9Oozd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb8ef81aa90adb59843cb2f1ae29f6a9_JaffaCakes118

Files

eb8ef81aa90adb59843cb2f1ae29f6a9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1442cb696534a20d5067ea1cf7fd376c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
VirtualAlloc
VirtualFree
OpenMutexA
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
HeapSize
HeapDestroy
GetVersionExA
FreeLibrary
LoadLibraryW
GetProcAddress
GetCurrentThreadId
GetLastError
LocalFree
GetVersionExW
HeapFree
HeapReAlloc
HeapAlloc
FindResourceExW
FindResourceW

oleaut32

OleSavePictureFile
OleCreatePropertyFrame
SafeArrayGetIID
SysReAllocStringLen
OleLoadPictureFileEx
CreateTypeLib
OleLoadPictureFile

wtsapi32

WTSRegisterSessionNotification

Sections

.text
Size: 186KB - Virtual size: 214KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1004B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 290B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ