efcfc436cfd0eb5d16f236d15d4e5bd7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efcfc436cfd0eb5d16f236d15d4e5bd7_JaffaCakes118
Size

123KB
MD5

efcfc436cfd0eb5d16f236d15d4e5bd7
SHA1

539c0933fba509584960e540c8d9b7368be89b90
SHA256

5b2d3fda517d4e1998c30df9507f5e93532a14d08737133ad1803ad12d37922e
SHA512

0110fd41330e45f9ad217c3ccdc95cbfd2cbbc707b7f19a5bc9b682aaf3ef77be1545c65b5d6027d4ddd783ac141d508e39df21719e3845ae6c7a3b362254377
SSDEEP

3072:+7PZZs9BltTVfVCYhnAd8FS9SMXxZ0chmlYVxmmXt8:+jZq9BDtVTzFS9xedKVLXe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efcfc436cfd0eb5d16f236d15d4e5bd7_JaffaCakes118

Files

efcfc436cfd0eb5d16f236d15d4e5bd7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fee52bba61d1bae62af2a604301eaa5c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ExitProcess
FindNextFileW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
HeapDestroy
IsDebuggerPresent
LoadLibraryA
SetUnhandledExceptionFilter
VirtualAlloc
VirtualFree

user32

GetActiveWindow
GetForegroundWindow
GetWindow
LoadStringA
MessageBoxA
RegisterClassA
TrackPopupMenu

gdi32

GetTextMetricsA
RestoreDC

shell32

SHBindToParent
SHFileOperationA
ShellExecuteExA

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 817B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ