6eeec67eafa61f7c746b634955c42085_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6eeec67eafa61f7c746b634955c42085_JaffaCakes118
Size

55KB
MD5

6eeec67eafa61f7c746b634955c42085
SHA1

6d3afe9299c94f74b116d69469cdf75df9215462
SHA256

8ac0b518aae3f70395b4d8abe9d6b2b732023157432541c256ab939d24476523
SHA512

5561c9fad6af6ebf95a864c6eb7cd13b7ee1c7abe97e66ff2cb0c301821b9419d98257887847900031cdef2535e69eb4a444f85328f5ab11554687a43106d102
SSDEEP

1536:waVrIbZx2juuehujmU7eQ2DETlhlW85GDBcs8:waKdsjPWuR2DERha1i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6eeec67eafa61f7c746b634955c42085_JaffaCakes118

Files

6eeec67eafa61f7c746b634955c42085_JaffaCakes118
.exe windows:4 windows x86 arch:x86

88fc5a6acb4204af3d8af9d0cc71153c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DrawStateA
EnableMenuItem
EndDialog
GetCursor
GetDC
DestroyIcon
MessageBoxA
MessageBoxIndirectA
OemToCharBuffA
RegisterClassA
ShowCaret
DestroyCaret
DeleteMenu
CreatePopupMenu
CreateDialogParamA
CopyImage
CharUpperBuffA
CharPrevA
ChangeMenuA
LoadMenuA
wsprintfA

kernel32

VirtualAlloc
Sleep
GetVersion
FreeResource
ExitProcess
EnumResourceLanguagesW
EnumResourceLanguagesA
CloseHandle
lstrcmpA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 254B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE