eb35554860dc194f1fbbc62706d857d5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb35554860dc194f1fbbc62706d857d5_JaffaCakes118
Size

357KB
MD5

eb35554860dc194f1fbbc62706d857d5
SHA1

f9ffbbc51d3e8c5b516625885d8cfb7cc702520c
SHA256

9d20f38e68e69c83b5059285e4a8fe12cc5b76070dc42356ec456d462db4ba48
SHA512

8397cdb81c941765729d42273914aaab4c918ce7845acb7051e4d4cec1d4592ca80a1ab47e7f0eb38a8358683afacd8e6ff0cfe24773ebd2605839696366bd48
SSDEEP

6144:Z3mMm9nFK7Ax+LYBrtSRbIqz+WSrLGj+wvjG+qhloMHDjFNKTmdiV:5EMAxQ1bH8azq0SFNoV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb35554860dc194f1fbbc62706d857d5_JaffaCakes118

Files

eb35554860dc194f1fbbc62706d857d5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fbfb5bcaca5b617a7d36fd75f3f2cada

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
IsDebuggerPresent
ResetEvent
GlobalLock
EnumResourceTypesW
IsBadReadPtr
CancelIo
CloseHandle
lstrlenA
GetConsoleTitleA
GetLastError
LoadLibraryExW
CreateMutexA
LocalFree
FreeConsole
SetLastError
GetSystemTime
VirtualProtectEx
GetModuleHandleA
Heap32First

user32

DialogBoxParamA
GetKeyState
CreateWindowExA
EndDialog
GetMessageA
CopyImage
IsIconic
CloseWindow
GetDlgItemInt
EnumWindows
GetDlgItemTextA
GetParent
GetMessageA
MessageBoxA

setupapi

IsUserAdmin
MyFree
SetupCloseLog
MyMalloc
MyRealloc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ