eb30f9d8712addb4d0a2f4efdf773985_JaffaCakes118 | Triage

Sharing

General

Target

eb30f9d8712addb4d0a2f4efdf773985_JaffaCakes118
Size

182KB
MD5

eb30f9d8712addb4d0a2f4efdf773985
SHA1

2a8fb0fe691e7e9df3cb74516cb859f041fcff92
SHA256

530907838ae355523d87e99bed608fd8b1338ccc4a8b6616155dafd55a3d6d11
SHA512

bc33a88de73a9ea618d20e125e71f67f48e67bf34208073936a964162c248569d657914eefa1405b2ab3f51432e29dc2a4a4a65ca6b1f31357448ca90e790675
SSDEEP

3072:UEgFq0+NCbW+rmhJOECdrbHpbOLZOm3ffE4+GWZw7gKjXf+IxBQqp8in:KFq0+kb1KQ72F3ffdEW71DXxBXiin

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb30f9d8712addb4d0a2f4efdf773985_JaffaCakes118

Files

eb30f9d8712addb4d0a2f4efdf773985_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5c42947e5fde1bed6337b9bfc40462bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

I_RpcFreeBuffer
UuidCreate

msimg32

AlphaBlend
TransparentBlt

winmm

timeGetTime

kernel32

FlushInstructionCache
LocalAlloc
LocalFree
LoadLibraryW
ExitProcess
SetLocaleInfoW
GetVersionExA
ExitProcess
GetModuleFileNameA

gdiplus

GdipGetImagePixelFormat
GdipGetImageHeight
GdipCreateBitmapFromFile
GdipGetImageWidth
GdipDisposeImage

user32

RedrawWindow
ClipCursor
FindWindowA
DestroyMenu
CreatePopupMenu
TrackPopupMenuEx
GetDesktopWindow

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ