0ae1b7024f1f0e17e6d3c9ca84367fc2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ae1b7024f1f0e17e6d3c9ca84367fc2_JaffaCakes118
Size

50KB
MD5

0ae1b7024f1f0e17e6d3c9ca84367fc2
SHA1

e521fa6ebaa6aadb1dd7e10eade558c569f8f13e
SHA256

728e3123510260ede92aee94434f712e954b9776a7375f8b6576d711dd4ccde8
SHA512

5b48691a0a00e3f7c89f969c2bd69148ac7e5de31e01ddfb9c702cb1e0a5523bc7b98b2a2647c9f4ed7650fe51718dbcefb469c816ceb10b2dc870e00d44e896
SSDEEP

768:OxuWgyoGtftSqFTFOP43/lyKEoEkuRxtkca2yuO1YF/vr/XtlgPFnz2yTW6OLQn:OsWgWt9J/yBHkYtA2DNLbg5niNQn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Label_Copy_UPS.exe

Files

0ae1b7024f1f0e17e6d3c9ca84367fc2_JaffaCakes118
.zip
Label_Copy_UPS.exe
.exe windows:5 windows x86 arch:x86

ebd390d41aaab9af1588c2674a0fbac7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetClassLongA
SetWindowPos
GetActiveWindow
IsCharAlphaNumericW
ValidateRect
SetWindowTextA
OemKeyScan

ole32

CoLoadLibrary
OleGetAutoConvert
OleLockRunning

kernel32

FreeLibrary
CopyFileW
CreateProcessW
HeapFree
SizeofResource
SetFileAttributesA
HeapDestroy
GetStartupInfoA
GlobalLock
GlobalUnlock
LocalAlloc
LocalFree
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
LoadLibraryA
IsSystemResumeAutomatic
HeapCreate

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ