ea99360645755ac53b9e711562b11322_JaffaCakes118 | Triage

Sharing

General

Target

ea99360645755ac53b9e711562b11322_JaffaCakes118
Size

165KB
MD5

ea99360645755ac53b9e711562b11322
SHA1

c432fe380885e81fd5213ccd7601ef3d9ae42a33
SHA256

da5f0cd1f30e910acc75d0d6c1e7b247667567e8812c6ced66bdafb724581dbe
SHA512

b84f733a177d3998eff67aa6fa6f79b30ec3ec1a49c91867b8517597ea442844b7486f7f32dc41c6b222f204e6929352a023ae85d852ae7bf94c73328e2d847d
SSDEEP

3072:bVAgTE84TncQ5htvww+0uQWhbLR1z0VbCG1/WjQva6fORYVrdacJEvF:pT34Tnco5wwfXeld0lCC/RGRSrYcKvF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea99360645755ac53b9e711562b11322_JaffaCakes118

Files

ea99360645755ac53b9e711562b11322_JaffaCakes118
.exe windows:1 windows x86 arch:x86

6a51ed99480b25f971c07b717d104b55

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

FlatSB_GetScrollProp
ImageList_Create
ImageList_LoadImageW
InitMUILanguage
FlatSB_SetScrollPos
ImageList_GetIcon
ImageList_Duplicate

kernel32

GetCommMask
EnumSystemCodePagesW
LoadLibraryA
FlushInstructionCache
QueryPerformanceCounter
lstrlen
VirtualProtect
SetCommConfig
FindFirstFileA
DosPathToSessionPathA
GetProcAddress
EnumCalendarInfoA
DeleteAtom
SetVolumeLabelA
VirtualAlloc
MoveFileWithProgressW
CreateFileMappingA
GetConsoleCommandHistoryA
VirtualFree

Sections

.text
Size: 75KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE