eb59ff0e328307e9545173bf461c7795_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb59ff0e328307e9545173bf461c7795_JaffaCakes118
Size

187KB
MD5

eb59ff0e328307e9545173bf461c7795
SHA1

f62c1678aeb2252804d024576e4515a8727c27f3
SHA256

14fe2ffa8285e77fb3a0072a14528a5e21c8e2c4e68ae1df72c7144cd7f91277
SHA512

16c2222717723a08ca9a8f8b3feacfe92c4678244597c3c065bd2c4b90cf4ba1e59f6fb68c7234227e4c57d9325fd47bcc43eadd479c150f6869cffef3266cf6
SSDEEP

3072:TLKbVYqT73epdPJm1dOeRsHpQqKG0IFhWq7N3zzZEzlW/P8BJOSDZYw3:TLeT7+Nk19ybKXILWqJjFEzqP8lx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb59ff0e328307e9545173bf461c7795_JaffaCakes118

Files

eb59ff0e328307e9545173bf461c7795_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0c5a1d5b668dd25fdc68adc82726a506

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

GetHGlobalFromILockBytes
CoTaskMemFree
StringFromGUID2

imm32

ImmAssociateContext

kernel32

SetProcessPriorityBoost
InterlockedIncrement
ExitProcess
TlsFree
EnumResourceTypesA
TlsAlloc
TlsSetValue
SetLastError
TlsGetValue
GetStdHandle
GetLastError

Sections

.text
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ