07a640e7e039ac35d943c37311710319_JaffaCakes118 | Triage

Sharing

General

Target

07a640e7e039ac35d943c37311710319_JaffaCakes118
Size

60KB
MD5

07a640e7e039ac35d943c37311710319
SHA1

52292b5d25fa6ac36dfacba2ab788db5071660d7
SHA256

c7399635730b7c180b6212ec6eaee2a9333ebd5deaf15803d13f3e0086021149
SHA512

09b2a85bc6b1c513f050692d52da4f802b0204d8d7969d273401eb50c1f40087fab1537d08cde84cdcd90e7f1abdc9fbe5ccba9abd1ffb2db9782b36975f59a4
SSDEEP

768:mpCVNtsRY3BrUdiPGY4QLZ7e3PiQxvn0+E22khOrBNOHs02i3vRnXVODdOYuhPGy:yCVNP5eT0F2xhEys02mp0WhPGw5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07a640e7e039ac35d943c37311710319_JaffaCakes118

Files

07a640e7e039ac35d943c37311710319_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1a54090c3298280ddef3a8a36a393646

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
lstrlenA
GetLastError
GetLocalTime
lstrcpyA
GetVersion
FindAtomA
CloseHandle
WriteFile
CreateFileA
GetSystemTime
lstrcatA
lstrcpynA
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
GetTempPathA
LoadLibraryA
GetTempFileNameA
CreateMutexA
OpenMutexA
ExitProcess
lstrcmpA
GetCommandLineA
RtlUnwind
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

user32

wsprintfA
GetCursorPos
IsWindowVisible
GetCaretPos
ClientToScreen
GetFocus
InflateRect
EqualRect
GetWindowRect

shlwapi

SHGetValueA

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE