eea22b82f495defd278430bb2172f327_JaffaCakes118 | Triage

Sharing

General

Target

eea22b82f495defd278430bb2172f327_JaffaCakes118
Size

50KB
MD5

eea22b82f495defd278430bb2172f327
SHA1

ac681c0720ce43f71e75f9fa96240409fc081619
SHA256

11574e844ebef2a6efb8d3388286034f91d0fd349686c75b51f90d5cbc602c2b
SHA512

ebf80c1ec2ca0b40ce64e4a355944c4cebe7996cfdeaf5cebab7ccd13c5f141538d4556ff7b8cbe486b5b2606ac5947e95288c3e86a3ab8baee4fff1b5763937
SSDEEP

768:5PkkvH81WUlPw2RJkkT1Z5JbDDNWus0WVxlL3xSOSVPylUzMKinQ1Q8jPsahM:JvHYWUl5nT1BbDDaVLLhYpyjvnQOQh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eea22b82f495defd278430bb2172f327_JaffaCakes118

Files

eea22b82f495defd278430bb2172f327_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6187d65cbe4ce48a27113f2ddbd7ba0a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumDateFormatsExW
ExitProcess
GetCommProperties
GetSystemPowerStatus
GetUserDefaultLangID
GlobalFlags
InitAtomTable
LeaveCriticalSection
SearchPathA
VirtualAlloc
VirtualFree
WideCharToMultiByte
WritePrivateProfileStringW

advapi32

AdjustTokenGroups
CryptSignHashW
GetNamedSecurityInfoExA
RegNotifyChangeKeyValue
RegOpenKeyA
RegQueryValueW

shell32

Control_RunDLL
Control_RunDLLA
SHGetFileInfoA
SHGetSpecialFolderPathA
ShellHookProc

gdi32

CloseEnhMetaFile
CreateFontW
CreatePalette
GetCharWidth32A
GetColorSpace
SetDeviceGammaRamp
SetWorldTransform

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE