ea0f2726fa907ce06ac9ceb791a2eba1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea0f2726fa907ce06ac9ceb791a2eba1_JaffaCakes118
Size

363KB
MD5

ea0f2726fa907ce06ac9ceb791a2eba1
SHA1

6c0d561d1f9a01b9a6c4868e600e8205080e9942
SHA256

76cbe75b16580703076238ef4573fa9cde32929cd3a87a86b8f27a8b6ed7f3da
SHA512

0ba5ad2c2a05ce0d1258ede1f07affd689d02f70af6312c9385e00b368500c6368f2694f726a553ab296878146392afb85a030196cb8e9714d726591646e8f00
SSDEEP

6144:/iJwnMGOr8fe0AJgjchjTnDqNkCYV7zj9nd56t6L8R8NmC:a+n9O8e0Fcx/bV7Pn5k+XNH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea0f2726fa907ce06ac9ceb791a2eba1_JaffaCakes118

Files

ea0f2726fa907ce06ac9ceb791a2eba1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d55d1bf0fe65ecad011bfa44d4e7c6ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
EnumResourceTypesA
FreeConsole
GetCommandLineA
DeleteCriticalSection
GetComputerNameA
GetDriveTypeA
TlsGetValue
CreateMutexA
SetLastError
VirtualProtect
GetTickCount
FindClose
ReleaseMutex
CloseHandle
GetExitCodeProcess
GetDiskFreeSpaceExW
GetModuleHandleA
Sleep
LoadLibraryExW

shell32

SHFree
ShellMessageBoxA
DragQueryFileA
SHGetMalloc
ExtractIconA
DragFinish
DragAcceptFiles
ShellAboutA
DuplicateIcon
DllUnregisterServer
SHGetSettings
StrChrA
SHGetDiskFreeSpaceA

printui

bPrinterSetup
PnPInterface
bFolderGetPrinter
vPrinterPropPages
vQueueCreate

user32

MessageBoxA

Sections

.text
Size: 1024B - Virtual size: 612B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ