ebe36984a153d4ddd155fc03f686c0b0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebe36984a153d4ddd155fc03f686c0b0_JaffaCakes118
Size

138KB
MD5

ebe36984a153d4ddd155fc03f686c0b0
SHA1

f465bd4b75e6cea45b0d321fe57e31ab08410557
SHA256

3104f5e5fdf07dbee904c8780818cfe7bac3604f728192b811d98def52d063d8
SHA512

dc200a080be05aec3515ea7c9ac6a239520710c176aa08bb77a41570923096c5835bc67224b722f55590271e03c40cc24f0e46987405d88928f547771abaa29d
SSDEEP

1536:sklzr82M22564FJoq5c2Rqbi+sHjYsZPIUmFpcoR9/+fF53KC+ZuqzAKU5DTtk/u:dNApTs4FJXkm8+P+pR2fF53H/qJAgNvk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebe36984a153d4ddd155fc03f686c0b0_JaffaCakes118

Files

ebe36984a153d4ddd155fc03f686c0b0_JaffaCakes118
.exe windows:1 windows x86 arch:x86

cccf158cf826b36306363c9565faaa6a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyA
RegCloseKey

comdlg32

GetOpenFileNameA
GetSaveFileNameA

msvcrt

__p__commode
_except_handler3
_adjust_fdiv
_acmdln
__getmainargs
_initterm
__setusermatherr
_exit
_XcptFilter
__set_app_type
exit
_controlfp
memcpy
__p__fmode

kernel32

GetStartupInfoA
HeapCreate
HeapAlloc
GetModuleHandleA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ