eb34c6f770edcbe7f5dd95cfb78b8ff3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb34c6f770edcbe7f5dd95cfb78b8ff3_JaffaCakes118
Size

12KB
MD5

eb34c6f770edcbe7f5dd95cfb78b8ff3
SHA1

a59533b9974d537bb7883be9c7055e930174d05c
SHA256

151f157eea4f696e2036fec90620b450fa0160de100c037d3bdeabbec01112e1
SHA512

2087d67ef8411844f55dfbb26973bc047db292e854e7171d0ad94a5602df2f7ba386e12cc4ff957ff84ef0cb754560b16798e446bda1a5b06177e452eb42e8bf
SSDEEP

192:SD7hEiuZWDKf7uOdOgbS6vPh1tqHsiM0q:Sv/IcwOgF4s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb34c6f770edcbe7f5dd95cfb78b8ff3_JaffaCakes118

Files

eb34c6f770edcbe7f5dd95cfb78b8ff3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f07303654f77db48713e1b0f390a06f4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
lstrlenA
WriteFile
GetProcAddress
CloseHandle
HeapFree
GetTickCount
GetProcessHeap
Sleep
lstrcatA
GlobalFree
GetTempFileNameA
LoadLibraryA
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
IsDebuggerPresent

user32

wsprintfA

netapi32

Netbios

ws2_32

WSAStartup
WSACleanup

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 354B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ