ebb6d3800c09bb57f7cd0503e93aca1a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebb6d3800c09bb57f7cd0503e93aca1a_JaffaCakes118
Size

151KB
MD5

ebb6d3800c09bb57f7cd0503e93aca1a
SHA1

c237ed65f6ca40913d6746519745a786afe97547
SHA256

f8c4232d17756f2b9bf425ed4e9eafea9af91b28dbb20be752de3c1f312fe82d
SHA512

e7f40d27669dce96a13f4f5b15c684c5835009e39b75868295165c04f6342b6aedaf6b379f9b0a7217a8fb0f4e8f79a0e82cef0e5b5d46dcd17053fdfffb0ebe
SSDEEP

1536:RzLP3MTbWXZ7tOam88bHj/2MX3B4lfn/5RAPR2XV3sd84RYEGn3f77iDJi8MxyRZ:N3MTbMjMeH/VMfYEGnPPMXM4R+7SGZp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebb6d3800c09bb57f7cd0503e93aca1a_JaffaCakes118

Files

ebb6d3800c09bb57f7cd0503e93aca1a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a5db4c7f7675b50e2a749f41eceb32c1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
GetStartupInfoA
GetDriveTypeA
GetOEMCP
GetLastError
GetCurrentProcessId
GetCurrentThread
GlobalFindAtomW
lstrcmpA
VirtualAlloc
GetCommandLineW
GetModuleHandleW
VirtualFree

user32

GetParent
GetSystemMetrics
CharNextA
GetDesktopWindow
DispatchMessageA
GetDC

gdi32

SetBkMode
PatBlt
SetWindowExtEx
SetTextAlign
SaveDC
GetPixel

glu32

gluTessCallback

comctl32

InitCommonControls

Sections

.text
Size: 1024B - Virtual size: 1023B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Skxyt, S
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ