eb14652b0f575686600cb7a13f4b1667_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb14652b0f575686600cb7a13f4b1667_JaffaCakes118
Size

152KB
MD5

eb14652b0f575686600cb7a13f4b1667
SHA1

8a9eaade52fb6fde44928a83175411b8fd571e9f
SHA256

19d313be3b1c4cd4e08c14ede6cec7047cc89641c2f7f328b5b9e38160ac5376
SHA512

59d041d49f13296c79916c51ec06ce568120ed50392d248d99bbd19cc48b39d3e6bb4b6652e07495c0ada6403279f6a29255d489b1ac0ae16d7e94169db22898
SSDEEP

3072:5wsZ12ez/V3BaNkoeO2GoMK60/Aobc4kW2:5T1x/o2nC1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb14652b0f575686600cb7a13f4b1667_JaffaCakes118

Files

eb14652b0f575686600cb7a13f4b1667_JaffaCakes118
.exe windows:4 windows x86 arch:x86

982576fbc1836aacdbbfb7914231c7dd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDesktopWindow
GetDC
TranslateMessage
CharNextA
DispatchMessageA

gdi32

SetTextColor
SetWindowExtEx
PatBlt
GetClipBox
CreateCompatibleDC
SetMapMode
SelectObject
MoveToEx
GetObjectA
CreatePalette
GetTextMetricsA
CreateSolidBrush

kernel32

DeleteFileA
GetModuleHandleA
SetCurrentDirectoryA
GetCurrentProcess
VirtualAlloc
RemoveDirectoryA
GetVersion
VirtualFree

glu32

gluTessCallback

comctl32

InitCommonControls

Sections

.text
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Qvrid Kc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ