eb5c862e213d3bd253dfa01edb0c2813_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb5c862e213d3bd253dfa01edb0c2813_JaffaCakes118
Size

655KB
MD5

eb5c862e213d3bd253dfa01edb0c2813
SHA1

871aa37bd7172f57cfdebb96a1f59d705783d3d2
SHA256

3d218ad7e94223ac17067b8dc32f4204661584b9967bd4fc265af72cd11dcfcd
SHA512

6a23963f7ede337a693d364c9320017dd8fcb41ec5f9942363e4eb06d2d40628c494f667597530f954154ac1d45b2c7272c79382895339f5f8555421fac36385
SSDEEP

12288:/Dgts0ZgBzvgbkj1Nrl0BJggq0nCZm8FH7plvhE892yX6mIZI:sts6gBN1l2BJg+KmQ7nvhmu6mIZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb5c862e213d3bd253dfa01edb0c2813_JaffaCakes118

Files

eb5c862e213d3bd253dfa01edb0c2813_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6454e523b41ce4606c4d59e3eb617c48

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
GetPropA
LoadIconA
CharToOemW
LoadCursorW
MessageBoxA
PostMessageW
GetClassLongW
IsCharLowerW
PeekMessageA
GetDlgItemTextW
LoadBitmapA

kernel32

ReadFile
GetVersionExW
GetTickCount
LoadLibraryW
GetFileAttributesW
CreateProcessA
CloseHandle
LoadLibraryA
HeapAlloc
VirtualAlloc
OpenFileMappingW
FileTimeToSystemTime
CreateMailslotA
SleepEx
FindResourceExA
OpenSemaphoreW
SetCurrentDirectoryA
WriteConsoleW
CopyFileW

nddeapi

NDdeShareSetInfoA
NDdeShareDelA
NDdeShareEnumA

Sections

.text
Size: 648KB - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ