ebcaad135a20b0f492cd3b22af16e9bf_JaffaCakes118 | Triage

Sharing

General

Target

ebcaad135a20b0f492cd3b22af16e9bf_JaffaCakes118
Size

276KB
MD5

ebcaad135a20b0f492cd3b22af16e9bf
SHA1

f6ca950b51d572c97311031de37285d702a4cf93
SHA256

47e155d649a081ea6c3bd239c520a2ee06701124883c13d3034bc3a88bdc4ec5
SHA512

87b93a91f99b1c5e354582e93decf025f9c4dd967222680176871a1eb53d185560f5b4831e72541d4c1b4dbab7b834a2d031c7cd95003148e6efca60982c5430
SSDEEP

6144:P3C+0xqsdRkBL2XbyNOiVxWckLGyuc7b4ycChLn:P90xqsdKobyNZVeec7b4o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebcaad135a20b0f492cd3b22af16e9bf_JaffaCakes118

Files

ebcaad135a20b0f492cd3b22af16e9bf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

73768b22b84c187b07008e1e98d9c94a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GlobalFree
BaseFlushAppcompatCache
FormatMessageA
MultiByteToWideChar
LoadLibraryExW
GetCurrentThread
GetLastError
lstrlenA
GetTickCount
EnumResourceTypesW
CreateMailslotW
SetUnhandledExceptionFilter
IsDebuggerPresent
MulDiv
GlobalUnlock
RaiseException
LoadLibraryA
GetSystemDirectoryW
UnhandledExceptionFilter

oleacc

AccessibleChildren
CreateStdAccessibleProxyA

gdi32

GetStockObject

Sections

.text
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ