ef5b3513ef2f089f35bd91a4311ec4c5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef5b3513ef2f089f35bd91a4311ec4c5_JaffaCakes118
Size

161KB
MD5

ef5b3513ef2f089f35bd91a4311ec4c5
SHA1

506eaea131e15d517ba8ae7edba14d9674fbe8dc
SHA256

3479ff8e269fb4ac88a77fdf45fabbc32531dc92f08fdaa3c72e8615f742e284
SHA512

7b4ab94e6b46c1142a3d71b027750bc2384dae2c17a6f48bb3f1f08aeda79c128c00df0bab6cce692e35322d6fbe0282a6bde2f3119856b1569e87f41771f8f0
SSDEEP

3072:eoidSlWDyVEGigPojTGY4pgYKaTsd/HTLkJ3AujFHMWRTrdL2TR07Yx:kSlBmGigPuSY4pjhTsBY6uBsEgSsx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef5b3513ef2f089f35bd91a4311ec4c5_JaffaCakes118

Files

ef5b3513ef2f089f35bd91a4311ec4c5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3028294a2a640be350b5a14cad2f5608

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_amsg_exit
_initterm
_ismbblead
_XcptFilter
_exit
_cexit
__setusermatherr
mbstowcs
__getmainargs

gdi32

SetLayout
PathToRegion
CreateEllipticRgnIndirect
StartPage
ScaleWindowExtEx
GetTextColor

user32

SetWindowPlacement
wsprintfA
GetMessageW
DefWindowProcW
SetWindowPos
ShowCaret
TrackPopupMenu

shlwapi

StrFormatByteSize64A
StrRChrW

kernel32

SetThreadExecutionState
GetExitCodeThread
SetThreadPriority
IsBadReadPtr
HeapFree
DeleteFileW

Exports

Exports

?GeometryTranslate@@YGHPADK|U

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 399KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE