eff6b89ec94a48809e5f52cd63ab36d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eff6b89ec94a48809e5f52cd63ab36d8_JaffaCakes118
Size

13KB
MD5

eff6b89ec94a48809e5f52cd63ab36d8
SHA1

ff7fb36ecd218aeba184157b9e8580434aebb7d5
SHA256

dc1d7ce4856f91539e037c444f72ffc274d5e66d1a952792b6976a83a5b86848
SHA512

922167c1f67ba479d289b0734f7a33750ca9f234885ab86bbb948a60a5aab941c243f1fabeac4b9eb64cd9b0a7a89c3922289643844e12bf5c4a8bf5bb3b0d22
SSDEEP

384:YjUl4K9Ki0hJrJGRk2SmICUa0WJJ8j0WyF8DbBf:Y04RhTG5FICUNjQ8V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eff6b89ec94a48809e5f52cd63ab36d8_JaffaCakes118

Files

eff6b89ec94a48809e5f52cd63ab36d8_JaffaCakes118
.exe .js windows:5 windows x86 arch:x86 polyglot

0fdbe8bbe52056b36c6756f93480111f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

spiisupd.pdb

Imports

msvcrt

_except_handler3
_c_exit
_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_strdup
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_strlwr
strstr
strchr
strncmp
memmove
fwrite
_filelength
fread
fopen
fgetc
fseek
fclose
_initterm
vsprintf

kernel32

GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetEnvironmentVariableA
OutputDebugStringA
GetStartupInfoA

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE