eabf9904bef52e73c7d5d3e28e36be06_JaffaCakes118 | Triage

Sharing

General

Target

eabf9904bef52e73c7d5d3e28e36be06_JaffaCakes118
Size

155KB
MD5

eabf9904bef52e73c7d5d3e28e36be06
SHA1

bd932302d2a2e0b9bf5c1f62b27c558010c65503
SHA256

23dba92a8ffa68d8f9e6d4eedaf93949ce3bfcc2f82a8005364137b5c01d22bd
SHA512

9588dad58c22b14cfb58a3f120bbc0986f725686378acc0d484f7c2049eda497b1473b18f3bbd16eeb2c28c66efb7135bcbad5692c3370666dd12eb044f0580b
SSDEEP

3072:az+Clvp7jLVtXhyt+WSftTXeoW6rfIwE7PCwzJOcC2INQp4yHWhB03U0lgqggX0q:azxBjtXhyQWSZuoW6bNE2wzIcCyppWri

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eabf9904bef52e73c7d5d3e28e36be06_JaffaCakes118

Files

eabf9904bef52e73c7d5d3e28e36be06_JaffaCakes118
.exe windows:4 windows x86 arch:x86

50ea42e92a787efde23a91f8b699a0bc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

NtCancelTimer
NtClose
NtAccessCheckByType
NtClearEvent
NlsAnsiCodePage

comctl32

ImageList_ReplaceIcon
ImageList_Destroy
ImageList_Remove
ImageList_DragShowNolock

kernel32

FindNextFileW
GetCommProperties
WriteTapemark
GetComputerNameW

shell32

Shell_NotifyIconW
StrNCmpW
SheFullPathW
SheRemoveQuotesW

Sections

.text
Size: 62KB - Virtual size: 90KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE