efeed6ccfc025bed2991d2566db76111_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efeed6ccfc025bed2991d2566db76111_JaffaCakes118
Size

340KB
MD5

efeed6ccfc025bed2991d2566db76111
SHA1

c658e7681785a916f0309d998a6412a0b0368f09
SHA256

e7149eef6ee88b5f60a691098f195237b059b552f862035df055d832d9f98863
SHA512

757d2b10d441bc0997e7593929292de6f8f4f80ba10c39a06c9ac85d5df7cb0d7b5afbf95d2b1eaf13182a2c36a6e8643a47fa4a60ddcbd2b3dacd4f535dbbeb
SSDEEP

6144:iotIdKF7Yta2UM5IxXF/tIKAL7iFE7sNBo+aa9R3HJxvkSuM4Pyddg:I1tUM5aV/oLOVfhaa9ZpVK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efeed6ccfc025bed2991d2566db76111_JaffaCakes118

Files

efeed6ccfc025bed2991d2566db76111_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5f77d5428cf8342fcc234f0b53215b5d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
CloseHandle
MapViewOfFile
CreateEventA
GetACP
FreeEnvironmentStringsA
GetDriveTypeA
GetLastError
GetModuleHandleA
DeleteTimerQueue
LocalFree
GlobalLock
GetConsoleCP
LoadLibraryExA
IsBadReadPtr
CreateFileA
GlobalUnlock
HeapCreate
lstrlenA
GetStdHandle

user32

GetDlgItemTextA
GetParent
EndDialog
RedrawWindow
CreateWindowExA
GetDlgItem
DialogBoxParamA
CheckMenuItem
GetMessageA
IsMenu
GetSubMenu
ClipCursor
SetFocus
DrawIconEx

apphelp

ApphelpCheckIME
ApphelpShowDialog
ApphelpCheckRunApp
SdbFindFirstTag
SdbCloseDatabase

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ