eb6e08fc920bd526e1e49c65e0258119_JaffaCakes118

General

Target

eb6e08fc920bd526e1e49c65e0258119_JaffaCakes118
Size

52KB
MD5

eb6e08fc920bd526e1e49c65e0258119
SHA1

2a8b828c0b7235a93a9bb1058e9356069a015ee0
SHA256

4467e9f5f14af94bb1dd2526d3c8df1784e261c62f515faa7e40577e3184906e
SHA512

e29425bcaf92259a3f576018a51c91e59bbafcd693b68c2d33c5f7ec2e513f93ffb80408258d010b78d1b2f299bd2a8e5138e96f72a42df335ce67ae90cda514
SSDEEP

192:I2sKEyTngsqexVhjcvIXuSwy59Amg91Mn6fcUlWN8J2WG:dEyTn3VhjN59AB1P7lWN8J2W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb6e08fc920bd526e1e49c65e0258119_JaffaCakes118

Files

eb6e08fc920bd526e1e49c65e0258119_JaffaCakes118
.exe windows:5 windows x86 arch:x86

83ac3435ce75a7addd17a1fe2144a37d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessageA
TranslateMessage
DispatchMessageA
LoadStringA
GetActiveWindow
MessageBoxA
LoadCursorA
RegisterClassA
GetDC
ReleaseDC
RegisterWindowMessageA
IsRectEmpty
GetSystemMetrics
CreateWindowExA
SetCursor
PostQuitMessage
GetCursorPos
PostMessageA
DefWindowProcA

gdi32

GetClipBox
GetStockObject

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
exit
_cexit
_XcptFilter
_exit
_c_exit
strchr
atoi
__initenv

kernel32

OpenFile
GetVersionExA
GetModuleHandleA
GetCommandLineA
QueryPerformanceCounter
GetTickCount
LoadLibraryA
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetProcAddress
GetCurrentThreadId
FreeLibrary

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 692B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

83ac3435ce75a7addd17a1fe2144a37d

Headers

DLL Characteristics

File Characteristics

Imports

user32

gdi32

msvcrt

kernel32

Sections

.text Size: 4KB - Virtual size: 4KB

.data Size: 692B - Virtual size: 692B

.rsrc Size: 35KB - Virtual size: 35KB

.text
Size: 4KB - Virtual size: 4KB

.data
Size: 692B - Virtual size: 692B

.rsrc
Size: 35KB - Virtual size: 35KB