eaf5ba949e96efdcfb568d634bd1757c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eaf5ba949e96efdcfb568d634bd1757c_JaffaCakes118
Size

5KB
MD5

eaf5ba949e96efdcfb568d634bd1757c
SHA1

ba2aa39ef7483896357f64f05cc1b942b9066b44
SHA256

f63352aad23f7a88f83c407212c28fd7bd1fb75842e33275b191fda8aec41fe0
SHA512

d992c0a5a3385cd222e34dbc60d6dee7472556a11fe35056309b5fb150a60d0bf5fcb446f8e109771c3ecc55065b243b8490bcbb0f6f6a05a5ff9e3a85274dae
SSDEEP

96:6HUQs38EDBNdAiBXXtfvQPsK9Ps9TI/jHPmi:es3zAiBXXJx99TI/7Pmi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eaf5ba949e96efdcfb568d634bd1757c_JaffaCakes118

Files

eaf5ba949e96efdcfb568d634bd1757c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f4cb0479971395dbb773f0e4abfaba98

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
WideCharToMultiByte
lstrcpyA
HeapAlloc
GetProcessHeap
HeapFree
Sleep
ExitProcess
GetModuleHandleA
lstrcatA
SetEvent
CreateThread
ExitThread
CreateProcessA
CompareStringA
Process32Next
Process32First
CreateToolhelp32Snapshot
CreateEventA
WaitForSingleObject
SetFileAttributesA
CloseHandle
GetCommandLineA
GetProcAddress

advapi32

RegOpenKeyA
RegQueryValueExA
RegCloseKey

user32

CreateWindowExA
TranslateMessage
DispatchMessageA
MsgWaitForMultipleObjects
DestroyWindow
PeekMessageA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE