fec2ec5ac34c8453f6b0f265984d3e1f_JaffaCakes118 | Triage

Sharing

General

Target

fec2ec5ac34c8453f6b0f265984d3e1f_JaffaCakes118
Size

400KB
MD5

fec2ec5ac34c8453f6b0f265984d3e1f
SHA1

0b38ac4deef70b0c3b36d85533c162f9f0e8c445
SHA256

bdc22ab7bd6251903d4724bfc468749be9ccc8deb44e1616f634430006def89b
SHA512

e1ac0cf91a6df45e2b23c5fec676c66d1109533629f3e53bbdab4c0adac25431c17d7ad614df89bf5eb557d1860de3e3d622a974b603c489e30d78d587b00044
SSDEEP

6144:9XfuTR4Hs+RonJ5guEl9B+ppAHzW96yxKzIbFl78KCcfl:9XfuTR4HsLZE99TWrKzkWKXf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fec2ec5ac34c8453f6b0f265984d3e1f_JaffaCakes118

Files

fec2ec5ac34c8453f6b0f265984d3e1f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a174ec64744a4c337e9ee121a3a8021e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ehrjrhw.pdb

Imports

kernel32

GetTimeZoneInformation
GetCommandLineA
GetSystemRegistryQuota
ReleaseActCtx
SetFileBandwidthReservation
GetModuleHandleA
SetSystemFileCacheSize

advapi32

SetServiceBits

setupapi

SetupCopyOEMInfW

shlwapi

SHRegGetBoolUSValueA

gdi32

EnumEnhMetaFile
SetTextJustification
GetClipBox

user32

GetWindowThreadProcessId
ChangeClipboardChain
ReuseDDElParam
GetSubMenu
IsMenu
PackDDElParam
GetDesktopWindow
GetInputState

Sections

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 284KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 858B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ