eeb7f070cc024fb2259c5dd9357c3367_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eeb7f070cc024fb2259c5dd9357c3367_JaffaCakes118
Size

31KB
MD5

eeb7f070cc024fb2259c5dd9357c3367
SHA1

a6238b9a548a17d4d1b706ca7eb3e3312f9093a8
SHA256

690e2d909fde4ddfdc04b253337f17aa1b0f502d6b9056e13e73858e01a7fac5
SHA512

d3fcf10f8379cb69c9395194604a1c50f85f8ef4cda3880c8f4636cf3cd6011ec73692ba591c6425bc06a43b44497be7af3d7e7537332fe001a83a784c81907e
SSDEEP

768:QP5ikSbnsjxWhTQ5rV493SPaOWE/gfWIOkCS:UjxWe4Sr1KWI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eeb7f070cc024fb2259c5dd9357c3367_JaffaCakes118

Files

eeb7f070cc024fb2259c5dd9357c3367_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b77e435961c58f3ecab01545f695d405

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTime
GetConsoleAliasesLengthA
CreateProcessInternalA
ReadConsoleInputExA
Thread32First
GetUserDefaultLangID
SetPriorityClass
BindIoCompletionCallback
GetCompressedFileSizeW
FreeLibraryAndExitThread
CompareStringA
GetCurrentDirectoryW
DuplicateHandle
FindFirstFileA
CreateMailslotA
GetModuleFileNameW
MulDiv
SetFileApisToANSI
DnsHostnameToComputerNameW
InterlockedExchange
MultiByteToWideChar
WritePrivateProfileStructA
OpenFileMappingA
GetCurrentConsoleFont
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ