ef8b9012f3ed589b3efc18231d4491dd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef8b9012f3ed589b3efc18231d4491dd_JaffaCakes118
Size

157KB
MD5

ef8b9012f3ed589b3efc18231d4491dd
SHA1

552e53fb8aa51f8c4831bfe933dce837634b709d
SHA256

bc2550733e7255961dd31c6ec83b163e4e9ca24a5f48f55c7d9152e4366f918c
SHA512

dd0eb6a9931b1143d671b95b78643bcfe73b76c8467ed27fda829bc3da67c4bd76814e80d11b7f9b6ac344480cc0b2efb71a3f0b8cb438d38588aa51e94c2f9c
SSDEEP

1536:IrW2rWtLDUjKm79U7Qnv74/fR9CuT11kIBakvWZ3PvQg8:Ir0K79U7Qnv7AfBTDkp9Xi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef8b9012f3ed589b3efc18231d4491dd_JaffaCakes118

Files

ef8b9012f3ed589b3efc18231d4491dd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f3127087979ad94c507ae58d55e3d751

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetDesktopFolder
SHGetFileInfoA
Shell_NotifyIconA
Shell_NotifyIconW

oleaut32

OleLoadPicture
SysReAllocStringLen

user32

PeekMessageA
OpenIcon
OffsetRect
OpenClipboard
GetMenu
GetFocus
GetWindow
OemToCharA
CharNextA
PeekMessageW

kernel32

LoadLibraryA
ExitProcess
VirtualAllocEx
GetFullPathNameA
GetFileAttributesA
GetFileType
GetThreadLocale

Exports

Exports

_XmtMY@12

Sections

CODE
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tpdata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eedata
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ