ec7691959eeb876da90528957fa0a471_JaffaCakes118 | Triage

Sharing

General

Target

ec7691959eeb876da90528957fa0a471_JaffaCakes118
Size

244KB
MD5

ec7691959eeb876da90528957fa0a471
SHA1

e997e4e6f238a113f1653aa06fe3b63a11297b30
SHA256

2c217e4a419b16fcbd255db9b34691d7a9e20a285733215ff1a5aaa4d217f32c
SHA512

1e0ccf566f5d6e7ad7bff0c2ba8fc28f1cb6b5e981c5922231b5b7f57f1795aa412ae53c99255d774b7a4f2581bfa164d2d52835392fe388b477e1027319055c
SSDEEP

6144:Uf1XnNKUnSFCbSc7YktgvzHcqBNYJCg2V1k/eaTCK:Uf1XnNKUnSFBBvjcqL5zVMeaTl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec7691959eeb876da90528957fa0a471_JaffaCakes118

Files

ec7691959eeb876da90528957fa0a471_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b71b84b7d5b205bdf07a52d3546410a5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMailslotW
GetShortPathNameW
FatalAppExitA
DeleteAtom
HeapSetInformation
InterlockedDecrement
lstrcmpiA
_lwrite
FileTimeToSystemTime
GetCompressedFileSizeW
GetVolumeInformationW

user32

DrawIconEx
GetScrollRange
LockWindowUpdate
SetTimer
CharLowerBuffW
LoadStringA
GetMenu
GetDC

gdi32

GetFontLanguageInfo
SetBrushOrgEx
PtInRegion

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data0
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE