eea1f45abd6a51b96791f5139b14f0cf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eea1f45abd6a51b96791f5139b14f0cf_JaffaCakes118
Size

261KB
MD5

eea1f45abd6a51b96791f5139b14f0cf
SHA1

d6631e6acf5f58714e8b3cf371c1fb93da2302e8
SHA256

042acc320489f2266378b6b4614ee311d2d46543546f24149eefd0ee2f35579f
SHA512

f40b47899c8f4292677e6aeff23c0c438f87f156bde64ac745480fe9af39818956101f613e7eee65942b153f1fed1d6e566eba5c9cdb8dc793720fa2121afc27
SSDEEP

3072:GLnv8VNEUoSMdh7HobFMBWvAY5/Wp6wddGpTK532yjlB3G7soa4zcNVmmGY48:G4noS4HKFyWvRQkTKlpB3G7KqS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eea1f45abd6a51b96791f5139b14f0cf_JaffaCakes118

Files

eea1f45abd6a51b96791f5139b14f0cf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

93402143ea5e9cce80a93d707fcdde3f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

UnrealizeObject
RestoreDC
SetMapMode
GetPixel
ExcludeClipRect
SetBkMode
LineTo
EndPath
EndDoc
GetDCOrgEx
SetBkColor
OffsetViewportOrgEx
GetDeviceCaps
SetViewportOrgEx
GetStockObject

user32

GetDesktopWindow
CharNextA
GetMessagePos
GetInputState

kernel32

GetDriveTypeA
lstrcmpA
lstrcmpiW
DeleteFileA
GlobalFindAtomA
GetCommandLineW
GetLastError
GetCurrentThreadId
lstrlenA
GetTickCount
GetUserDefaultLangID
GlobalFindAtomW
SetCurrentDirectoryA
MulDiv
GetCurrentProcess
GetOEMCP
GetVersion
GetProcessHeap
VirtualAlloc
RemoveDirectoryA
GetModuleHandleW

comctl32

InitCommonControls

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ