ee8e084fa0f32e538489a0fc3cb61658_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ee8e084fa0f32e538489a0fc3cb61658_JaffaCakes118
Size

108KB
MD5

ee8e084fa0f32e538489a0fc3cb61658
SHA1

c1ed8e81d86623495756d055e536a15a7e84e65a
SHA256

51aa567076f94313f5dc0cc3e0a49f9cf817b2afff1988d626bcc7215e000141
SHA512

e30c6ba40df7e62de8e0c7ba05ca90c8c506ae32ff219f72a60936dd3e2c6a01817071e6d3c58c44d74b117f914c3f1ef14d3b0cc034fb3e62c538f36927b1b8
SSDEEP

3072:QLykiUnJtZnWm4tp2a16pZ20XtbvU5QEwC:QLyDUvZnWzp2awG0XNvW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee8e084fa0f32e538489a0fc3cb61658_JaffaCakes118

Files

ee8e084fa0f32e538489a0fc3cb61658_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f84b22ccb5deddce5e570d47f5e65c48

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTime
TlsAlloc
GetVersionExA
GetLocalTime
ExitProcess
GetProcAddress
GetModuleHandleA
VirtualAlloc
GetFullPathNameW
GetVersion
GetStartupInfoA

user32

GetDC
ReleaseDC

opengl32

wglDeleteContext
wglCreateContext

msvcrt

memset
_c_exit
_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
__dllonexit
_onexit
_except_handler3

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 95KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ