0437cd9ff0bb51dda393292de6cb22cf_JaffaCakes118 | Triage

Sharing

General

Target

0437cd9ff0bb51dda393292de6cb22cf_JaffaCakes118
Size

913KB
MD5

0437cd9ff0bb51dda393292de6cb22cf
SHA1

a247e0a53ec4dc3c2b3fcfaf604ff91dc72712eb
SHA256

2440474ab44a1c7ad89db2d147b89df1727da0ef074d85d131e66d49a34c105a
SHA512

b15aba917b9d9b9818dc69562eb908c9e6ac07d1cb465c9e20e76b3d0a68746e906ad44c7bf75af61ec77bb2cd8f629127e5d941141a131eedb681cdd318e76c
SSDEEP

12288:sd745/eNO7JEVRwXe3dWx8UaFOLFjvVHXAu5lzJqVCknjnK9tyEKHhM2BsQwfUVV:sN4pLtEVRwXFKClFXAunJmz3hMkt7FT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/eImage.exe

Files

0437cd9ff0bb51dda393292de6cb22cf_JaffaCakes118
.rar
Readme.txt
eImage.exe
.exe windows:4 windows x86 arch:x86

41f50659d931065888840fe49924fad6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

gdi32

MoveToEx

ole32

CLSIDFromProgID

oleaut32

GetActiveObject

user32

CreateDialogIndirectParamA

comctl32

InitCommonControlsEx

Sections

.text
Size: 900KB - Virtual size: 4.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
新云软件.url
.url