ebdea0cce58011ae120ef15da414b6ed_JaffaCakes118 | Triage

Sharing

General

Target

ebdea0cce58011ae120ef15da414b6ed_JaffaCakes118
Size

1.3MB
MD5

ebdea0cce58011ae120ef15da414b6ed
SHA1

aaa1f0a0e1a761d1a187aae35e855b1302360c05
SHA256

4683aeb65a21e405a621137908ee3fb2abd6877e642d2ee71758510c220ef9d3
SHA512

063023a84eccb389c821c2b89f10251532903a5bcbd458ac536baf44c3c6b024cd766347cf27a250f396179dd95cbe222e8038d5e080cf4970f6bbb75c7b2ae1
SSDEEP

24576:Fui2hSaudhebC0XLn/U8AUrOOkqb3MT36PFLtL0h55Fm+6BtstMF43A4Q:FN2y01GUrOOZ46PAs+kamKHQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebdea0cce58011ae120ef15da414b6ed_JaffaCakes118

Files

ebdea0cce58011ae120ef15da414b6ed_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ac14ca3de1c7b9225dd578888cefb832

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\temp\ass.pdb

Imports

kernel32

DeleteAtom
FindAtomA
GetLastError
AddAtomA
SleepEx
LoadLibraryA
GetProcAddress
Sleep
ExitProcess
GetModuleHandleA
GetTickCount

user32

SetMenu
GetMenu
GetDC
SendMessageA
PostQuitMessage
wsprintfA
RegisterClassA
CreateWindowExA

gdi32

SetDCBrushColor

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ