efdf44fc17ed71cac26c69182e843240_JaffaCakes118 | Triage

Sharing

General

Target

efdf44fc17ed71cac26c69182e843240_JaffaCakes118
Size

28KB
MD5

efdf44fc17ed71cac26c69182e843240
SHA1

b1066682f2fdaafcbd0df76597ca07c92b0bfee5
SHA256

94879bd33df41a4ea7b9c9c5d4ccc447ed28a960358dd25d8f890e6273275508
SHA512

416f6276daa12162c5b1a36aef886ecb4599cf9edb45e56b2f16edcd66632e47f7c1ec6123492237f98f279401794b2f7f3954691f570788d11d679053e6ee48
SSDEEP

192:6JegPTCh13Ata18ZUoOVl/3/twi1oyne5okipR8EWx5VRtTwZxf1I/Tzoz0ZY6yl:jgPTNayYl//6i1rtA5b9ie/Tzoc+37

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efdf44fc17ed71cac26c69182e843240_JaffaCakes118

Files

efdf44fc17ed71cac26c69182e843240_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c30105e17c559f2ac6646d9eae3ee719

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
QueryPerformanceCounter
GetEnvironmentVariableA
HeapAlloc
SetMailslotInfo
GetModuleHandleA
GetStartupInfoA

user32

GetQueueStatus
LoadBitmapA

ole32

CoInitialize

msvcrt

_adjust_fdiv
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_acmdln
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 750B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE