ec7006eb7034bdc85818f113b7cfe964_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec7006eb7034bdc85818f113b7cfe964_JaffaCakes118
Size

25KB
MD5

ec7006eb7034bdc85818f113b7cfe964
SHA1

f012deca1b0bc3dffcbe39d14035f0696dcfbe04
SHA256

ea8b2c940b6a6224f0ecf96ca748e00ec22deec42971105dc38b0d95b284a556
SHA512

0d5a587fac45dc9ac66b26e78e3b2339b5297ed5a1e709a396301dca1a8f652be801cb6ec434529c027847cbf988a85f844623f3d8bbddf77b840a08efe2defe
SSDEEP

192:eQIm2y6Rw/MmBIjC1oynhJcLQhd7Ay+DXXRy9RCgTw2kOujv5EmH:eQpb/z/1XSe/6hyD7w2Zg5H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec7006eb7034bdc85818f113b7cfe964_JaffaCakes118

Files

ec7006eb7034bdc85818f113b7cfe964_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9e6d3dd6f677f472faa423df78be7d7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetStartupInfoA
HeapAlloc
TlsGetValue
GetModuleHandleA
SetEnvironmentVariableA

user32

CreateAcceleratorTableW
ScreenToClient

gdi32

DeleteObject
GetMapMode
CombineTransform

msvcrt

__p__commode
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_acmdln
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ