eb466d1450acf4c8e697d329dae8dbb2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb466d1450acf4c8e697d329dae8dbb2_JaffaCakes118
Size

51KB
MD5

eb466d1450acf4c8e697d329dae8dbb2
SHA1

cfab0a30cb4c389f2743442f5bfb481f8ef187b6
SHA256

9baaa7304472cee9367ae0bbaddeb55cde75192d7ed04656aae4be9a504fbbf5
SHA512

ccbcf7b6d65f0c0c0dce082fe867ddde4fa09cd464beab472251d0a2a27420a37e0d6006469d0bc21a9edafe853a5e3c521a296b7c228dc763ae34cdeaa9e38b
SSDEEP

1536:+1xsP9CdCAIUZiovrW0E0VH6wqdHY3+7VezyLhOv:ysCCAIUZdrWf0Vpqd43GeUkv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb466d1450acf4c8e697d329dae8dbb2_JaffaCakes118

Files

eb466d1450acf4c8e697d329dae8dbb2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d9ee641ac5e326eba8556c56af884763

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexW
EnumSystemLocalesW
ExitProcess
FoldStringA
GetBinaryType
GetBinaryTypeW
GetEnvironmentVariableW
GetNamedPipeHandleStateW
GlobalFindAtomW
InterlockedDecrement
SetComputerNameW
SetCriticalSectionSpinCount
VirtualAllocEx

user32

DestroyCaret
GetWindowTextW
RegisterClassA
SendDlgItemMessageW
SetClassLongW

shell32

CheckEscapesA
DoEnvironmentSubstW
DragFinish
ExtractAssociatedIconA
ExtractIconResInfoA
ExtractIconW
SHGetSpecialFolderLocation
SHQueryRecycleBinA
SheGetDirW
ShellExecuteExA

gdi32

DeviceCapabilitiesExW
EnumICMProfilesW
GdiPlayJournal
GetDeviceGammaRamp
Polygon
RectInRegion
SetICMProfileW
SetROP2

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE