ebe8940a0ff2995101f8e576a5901d4c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebe8940a0ff2995101f8e576a5901d4c_JaffaCakes118
Size

431KB
MD5

ebe8940a0ff2995101f8e576a5901d4c
SHA1

9d059ed3445c30b03aa8d46b3b210dddca117407
SHA256

c8cfa4ed2f8904190ce0bd55527cf2299dc3a217d93fb33d7b02bab95b1020ee
SHA512

f966250bdd24266173b2909851d04c9621c802cc45564c210efa3679368a8872a8f7ae06f6a6418d4e4297e15e1f13aac6520ebe9f825fb01cc5910dc2cf7562
SSDEEP

6144:kHc0Su7GWayMyE7Rg8me2uQYCTaClad2AUX8X24hu/Ne9OnT8J6F61pxb:B673ayYLm9TGKxAUsXzUNemhWz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebe8940a0ff2995101f8e576a5901d4c_JaffaCakes118

Files

ebe8940a0ff2995101f8e576a5901d4c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4ae0ea52f8be0707ef431f865302fa3f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VarDecFromDate

ntdll

ZwListenPort

kernel32

GetCommandLineA
GetSystemDefaultUILanguage

user32

GetMenuCheckMarkDimensions

Sections

.text
Size: 429KB - Virtual size: 432KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE