eeb5a12487d53c0f25d69c0dc4f74058_JaffaCakes118 | Triage

Sharing

General

Target

eeb5a12487d53c0f25d69c0dc4f74058_JaffaCakes118
Size

38KB
MD5

eeb5a12487d53c0f25d69c0dc4f74058
SHA1

a7cd19acb5507e01ef44ebadea5536d13c0daf5b
SHA256

5bd321e92d2fc9cb3cc34c9544e5a59956f0337718e08d3874cce08dabe69c2e
SHA512

77e506c4c95ae2bc1966fcf172589616b3c3b50d13fb8f66f146db5a85d5e4fb441860cb70a832a7ef16b9b58d62dff9196453f3d9dd639070df8d11159f2c71
SSDEEP

768:EoGBwgQ9xh7miRJsKue84EZ43eX/rUI/w9bbVAAtFPoIlan81:EoGBwgc7miL85ZGWQIohZAAfm81

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eeb5a12487d53c0f25d69c0dc4f74058_JaffaCakes118

Files

eeb5a12487d53c0f25d69c0dc4f74058_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9e1048df170a525bae12059b67d988f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObjectEx
WaitForSingleObject
HeapAlloc
GetProcessHeap
ExitProcess
GetProcAddress
LoadLibraryA
HeapFree

user32

IsIconic
GetWindowTextLengthA
GetParent
GetWindowLongA
GetForegroundWindow
CloseWindow
GetClassLongA
GetClassWord
ShowWindowAsync
TileWindows
GetLastActivePopup
WaitForInputIdle
IsWindowUnicode
SetParent
AnyPopup
GetTopWindow
SetForegroundWindow
wsprintfA
IsZoomed
UnregisterClassA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 794B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE