eac405dc0a6714a8a04fad9cd7bd9765_JaffaCakes118 | Triage

Sharing

General

Target

eac405dc0a6714a8a04fad9cd7bd9765_JaffaCakes118
Size

6KB
MD5

eac405dc0a6714a8a04fad9cd7bd9765
SHA1

6666928d99020da5868c20940702edcb65330d4a
SHA256

ddc9d782a676081bc7f38fe8b01d9b8130229a2a4fe37bb90fd71c4d1d9b8792
SHA512

5af85f66714224bed885876072e079d6741eb015554540a02013236872b14f0465bd858de080ae9b1dfa92033e18b104ef8a5e5d1d1b90455e63037dbf5ab49c
SSDEEP

96:3d8eogcPP+ZQXpk2VaD+lbzgcDZJdI/DH4wmi:L5cX3Xm2VtlbzHjdI/bXmi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eac405dc0a6714a8a04fad9cd7bd9765_JaffaCakes118

Files

eac405dc0a6714a8a04fad9cd7bd9765_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3c0cdd14c906d5b48a3d9d38b8cce3f3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
WideCharToMultiByte
lstrcatA
lstrcpyA
CreateEventA
HeapAlloc
GetProcessHeap
HeapFree
Sleep
ExitProcess
WaitForSingleObject
GetCommandLineA
SetEvent
CreateThread
CreateProcessA
ExitThread
CompareStringA
Process32Next
Process32First
CreateToolhelp32Snapshot
CloseHandle
GetFileAttributesA
SetFileAttributesW
SetFileAttributesA
GetModuleHandleA
WinExec

advapi32

RegOpenKeyA
RegQueryValueExA
RegCloseKey

user32

CreateWindowExA
TranslateMessage
DispatchMessageA
MsgWaitForMultipleObjects
DestroyWindow
PeekMessageA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE