ee84976567206eed31eeeb8b6ca2c4a8_JaffaCakes118 | Triage

Sharing

General

Target

ee84976567206eed31eeeb8b6ca2c4a8_JaffaCakes118
Size

154KB
MD5

ee84976567206eed31eeeb8b6ca2c4a8
SHA1

4ac85ab5618890bb9e678964d5e10f555abf5fa7
SHA256

378db5f9e702725b5d3539c735a53dfce657dea52a667a91a9490f1e9bd3eed6
SHA512

0f6c4fb5c3a577a5fc5435e79159109197aef31995729a7da891f68fa6a2ecf942e5b9210bf96155fc4a466ad6c12e6d9f62d2b539d8b6a79d289bbe7ff584b8
SSDEEP

3072:apG6p7PrDi/FRC2voecQEYW4qyHuvV1xw2LEgieVMWSCE7KVl+lxU/KNL:kH7PrDKF03YWB6IvWsldSCAXa/KNL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee84976567206eed31eeeb8b6ca2c4a8_JaffaCakes118

Files

ee84976567206eed31eeeb8b6ca2c4a8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ba267a2bd2455c4bb275349d76e2dc10

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

GetCapture
InvalidateRgn
ExcludeUpdateRgn
RealGetWindowClassA
SetCapture
ValidateRgn
ValidateRect
ReleaseCapture
GetUpdateRgn

kernel32

FileTimeToLocalFileTime
ConvertFiberToThread
FindResourceW
FindNextFileW
LoadResource
SetThreadPriority
GetShortPathNameW
LocalFileTimeToFileTime
FreeLibrary
SetEnvironmentVariableW
FileTimeToSystemTime
CompareStringA
EnumResourceNamesW
FindClose
SetCurrentDirectoryW
GetStringTypeW
FindFirstFileW
RegisterWaitForSingleObject
GetLocalTime
SystemTimeToFileTime
SetErrorMode
SearchPathW

Sections

.text
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imul
Size: 1024B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ