eaafd01cdad5f1aed44793811d79afb2_JaffaCakes118 | Triage

Sharing

General

Target

eaafd01cdad5f1aed44793811d79afb2_JaffaCakes118
Size

81KB
MD5

eaafd01cdad5f1aed44793811d79afb2
SHA1

cae52b410a35d6928c36b52be4b07592195096e9
SHA256

81448601c62609c0ce93f4aaf7aad1dcb0ddf0ae24da2240310de486869bbad9
SHA512

09146b335cc96fda00f02da8d2d8b68534118a064bd9978ad1c107d7c029a3e8e509ece3d933a08fcb736bfba8f10fc536138013aaf09a38d150727858ddecfa
SSDEEP

1536:XBasGg4yp8DDz/LB2QunreAZ12w/UqppY8XnLQQJZd/HkR6u:RasGP3DPkay1SqbY8XLQkhu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eaafd01cdad5f1aed44793811d79afb2_JaffaCakes118

Files

eaafd01cdad5f1aed44793811d79afb2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

cefa81f65e5b1d5d4560e7fb83eb90c6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ChangeDisplaySettingsA
MapDialogRect
DdeCreateStringHandleW
GetSystemMetrics

msvcrt

_execv
_mbsnccnt
_mbsninc

ole32

HMETAFILEPICT_UserSize

advapi32

OpenBackupEventLogA
ObjectCloseAuditAlarmW
OpenThreadToken
GetKernelObjectSecurity

kernel32

GetPrivateProfileStringW
RemoveDirectoryW
FlushViewOfFile
GetPrivateProfileStringA
FindCloseChangeNotification

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.init
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ