0eef45cb18d0a135941ae9eb73b2c249_JaffaCakes118 | Triage

Sharing

General

Target

0eef45cb18d0a135941ae9eb73b2c249_JaffaCakes118
Size

26KB
MD5

0eef45cb18d0a135941ae9eb73b2c249
SHA1

eb4ff3edda1260d2dcacd77533718889d83c758d
SHA256

fdeec09ce718126fa8960dde776164c6346f2d3229269833dc61c8c545d1864c
SHA512

afaf9a5190159347fba60adbb4fc430dbdae0b4ef91dfb6aa54fc0661c5cf6dc9bce74b4cb95ad19c3dcd31145dede08b4d7e7ea5f449100f575d999cb5a0d8e
SSDEEP

768:XXj8WA3v7VvozrDMDY5tTPGYeyEkXZUcfYs:n4v3hvf2tTuYtXZTft

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0eef45cb18d0a135941ae9eb73b2c249_JaffaCakes118

Files

0eef45cb18d0a135941ae9eb73b2c249_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0ca51308a918021947cbfcfb60a66b50

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDefaultSortkeySize
GetCurrentActCtx
SetConsoleTitleW
FormatMessageA
HeapDestroy
FindFirstFileA
TransmitCommChar
PostQueuedCompletionStatus
LocalFree
lstrcatW
EnumerateLocalComputerNamesW
GetUserDefaultLangID

user32

IsWindowInDestroy
GetThreadDesktop
UserRegisterWowHandlers
EnumDisplaySettingsExW
GetAppCompatFlags
SwapMouseButton
GetPropA
OpenDesktopA
DdeImpersonateClient
DdeKeepStringHandle
InsertMenuW
ReleaseCapture
GetClientRect
MapVirtualKeyExW

Sections

.text
Size: 23KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 729B - Virtual size: 729B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ