febd7c5f7a98179c68903a528a9c7435_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

febd7c5f7a98179c68903a528a9c7435_JaffaCakes118
Size

106KB
MD5

febd7c5f7a98179c68903a528a9c7435
SHA1

d5556029ade98f932883e2b9a1d51214a8e2459a
SHA256

0fe67c38e4bc17b41bc005164d3863d064ff0fcf9716061a6f3440f1ebf12275
SHA512

6b2b7cf75818e9dd6a87ca242dbadc9618d7d2a58e7275f6736831cab4ba734847a866ca3f169026b4917181d3964c5fa4d851c0d34026e99c2a86b9c2fe8fa0
SSDEEP

3072:lhlk2cRvk474zzEgSo6B7YvhYY09i8uS:fKpRvk4vsJ3I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
febd7c5f7a98179c68903a528a9c7435_JaffaCakes118

Files

febd7c5f7a98179c68903a528a9c7435_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c1227d46f61b02c179fe14c4d25832e4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

??1type_info@@UAE@XZ
??3@YAXPAX@Z
__CxxFrameHandler
_CxxThrowException
_except_handler3

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
ExitProcess
lstrcpyA
GetTempPathA
CloseHandle
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
GetLastError
lstrcatA
WriteFile
lstrcpynA
lstrlenA
lstrcmpA
CreateFileA

user32

GetFocus
wsprintfA
InflateRect
GetCursorPos
EqualRect
IsWindowVisible
ClientToScreen

shlwapi

SHGetValueA

gdi32

GetBkColor
GetBkMode

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE