ea128fdd37ee5fd40a6bdb174bd6da4c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea128fdd37ee5fd40a6bdb174bd6da4c_JaffaCakes118
Size

90KB
MD5

ea128fdd37ee5fd40a6bdb174bd6da4c
SHA1

2c5375f0b4316133eadc962af32e08411517bb41
SHA256

6a04c65b873481285d34d66b1977dcb41bf9243c6141818ac3029a566a89a538
SHA512

2e993802a301c3130a24f77c36f20284e2dd54b4f41110cdf9703629b35223ff19c610ec9d07106f592f5c9e76b5f3d2f675fcaa9009a96eb1d938b282e12323
SSDEEP

1536:jbpk9W7UT1KB7g6OTquxZg7OT8wTeHkxNTeHM7Cy+wq4O:j1k94UT1sSTpxiOT8oeExResf+f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea128fdd37ee5fd40a6bdb174bd6da4c_JaffaCakes118

Files

ea128fdd37ee5fd40a6bdb174bd6da4c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

84bf02543249e7fec48ef332e005bd51

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetDefaultCommConfigA
GetPrivateProfileStructW

user32

DefDlgProcA
GetUserObjectInformationA
GetClassInfoExA
GetDlgItemTextW

gdi32

GetTextExtentPoint32A
RemoveFontResourceExA
DeviceCapabilitiesExA

Sections

.fasm
Size: - Virtual size: 225KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SHARE
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 788B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 413B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ