ecaa4d16119e30336c67051880ff40df_JaffaCakes118 | Triage

Sharing

General

Target

ecaa4d16119e30336c67051880ff40df_JaffaCakes118
Size

93KB
MD5

ecaa4d16119e30336c67051880ff40df
SHA1

0a9ef9f9496b41c157f2435a98f224d064185212
SHA256

d9a5a0c7e959d75be1bcd0eed2e90e18abf644019ff2861a4faec783279e8c4c
SHA512

ab644936d600bdb1453dc89239409aa451c0be83008630f46df6bc4628ee276756f1020ccea73b4d3c06c55d6a370cdf3b11f555d725582a7f556c8b74c77685
SSDEEP

1536:D+oM7G2uQNV/0rc6sdC3CYI9sdMZmMVF3iYVs9UngGr/sAzFPEUIWnUoya5bcu:D+BQ5sETIyKfiYVJv/sABNIWUNyb/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ecaa4d16119e30336c67051880ff40df_JaffaCakes118

Files

ecaa4d16119e30336c67051880ff40df_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9f324a6d03196962665142326316f340

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateMenu
GetCursorPos
PeekMessageA
GetMessageA
GetCursor
GetWindowLongA
SetWindowTextA
DestroyMenu
DeleteMenu
CheckMenuItem
BeginPaint
EndPaint
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
TranslateMessage
DispatchMessageA
GetMenuItemCount

gdi32

DeleteObject
CreateBitmap
GetStockObject
Rectangle
GetROP2

shlwapi

PathIsUNCA

ole32

CoInitialize
CreateBindCtx

comctl32

ord17

lz32

LZInit

kernel32

GetLastError
GetSystemTime
GetCPInfo
LoadLibraryA
DeleteCriticalSection
GetSystemInfo
GetModuleHandleA
FreeLibrary
GlobalFree
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetLocalTime
HeapAlloc
HeapCreate
GlobalAlloc

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE