eb0e9117b5ef0c574803770b0b36f844_JaffaCakes118 | Triage

Sharing

General

Target

eb0e9117b5ef0c574803770b0b36f844_JaffaCakes118
Size

161KB
MD5

eb0e9117b5ef0c574803770b0b36f844
SHA1

030f3767cd4322f045f26c5cd6e14c0bc7d54fcb
SHA256

b0ad2e18b6a3b9777129b900fe5874b579394cb9ff51e135046bdb7a6cdf0371
SHA512

adc33c4cbea0961c9a382c53ec49f744c1c5ed298e7bb7e87ae94caf31597a610c93a6b07da75f7d7fc3f78a42b07e2e6fb2eed1025acd05374798fb76029734
SSDEEP

3072:kojx9B/pFtWUL2bICrLBT48/KQ3gr81sRUTYa0BkZg9EzpAdSuPY32nVutG1lZNv:koV9B/pFtWi2bICrLBs8/KQK/ZzkWezm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb0e9117b5ef0c574803770b0b36f844_JaffaCakes118

Files

eb0e9117b5ef0c574803770b0b36f844_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b2e07a931ecdf3ddeed4055b21ba5d13

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

ValidateRect
InvalidateRgn
ExcludeUpdateRgn
SetCapture
ReleaseCapture
RealGetWindowClassA
GetCapture
ValidateRgn
GetUpdateRgn

kernel32

GetNextVDMCommand
FileTimeToLocalFileTime
SystemTimeToFileTime
FindFirstFileW
GetLocalTime
GetStringTypeW
SetThreadPriority
FreeLibrary
FindNextFileW
FindClose
SetErrorMode
LoadResource
FindResourceW
EnumResourceNamesW
SetCurrentDirectoryW
RegisterWaitForSingleObject
CompareStringA
FileTimeToSystemTime
LocalFileTimeToFileTime
SetEnvironmentVariableW
GetShortPathNameW
SearchPathW

Sections

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imul
Size: 1024B - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ