ebb4d60f439ee2c8bd2338a7a0115768_JaffaCakes118 | Triage

Sharing

General

Target

ebb4d60f439ee2c8bd2338a7a0115768_JaffaCakes118
Size

342KB
MD5

ebb4d60f439ee2c8bd2338a7a0115768
SHA1

889667522eb12e7bfc43062d5fe13fdce1d2a0ae
SHA256

e6be55b0e5a4c72c7db51dc583eb5534d3e7c5d3bb4bb243b1859e948dfe4bc5
SHA512

bbf63c2fac157d5fe659d75d639f861e8e3ea8f9b3794c1e35cf14d1da72f2ce106b03a1e5c1a94ab3210bf7c8fa6484f7f0f399428e880d35cbe8596da83fcb
SSDEEP

6144:Q0Yt1LcSj5PSXyggMfOLRTYO+9wTLfdvyhEwFUsjRLTt+/C:mFhgh2R8O+yFqpLh+a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebb4d60f439ee2c8bd2338a7a0115768_JaffaCakes118

Files

ebb4d60f439ee2c8bd2338a7a0115768_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8747e397ad6916ce165fcd86fafb102e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
GetModuleHandleA
CreateWaitableTimerA
GlobalUnlock
lstrlenA
FreeEnvironmentStringsA
FindClose
CloseHandle
HeapCreate
LocalFree
IsBadReadPtr
GetConsoleCP
LoadLibraryExA
CreateFileMappingA
CreateFileA
GlobalLock
GetStdHandle
IsDebuggerPresent
GetLastError
GetACP

user32

GetParent
RedrawWindow
GetMessageA
DialogBoxParamA
GetDlgItemTextA
IsMenu
DispatchMessageA
GetSubMenu
GetDlgItem
EndDialog
ClipCursor
CheckMenuItem
SetFocus
DrawIconEx

apphelp

ApphelpCheckIME
ApphelpCheckRunApp
SdbFindFirstTag
ApphelpShowDialog
SdbCloseDatabase

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ