07bf6fe35dc986c9256f861c6adb4a8a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07bf6fe35dc986c9256f861c6adb4a8a_JaffaCakes118
Size

74KB
MD5

07bf6fe35dc986c9256f861c6adb4a8a
SHA1

6219808021a57e7bf359972d75ea38f5d9d6e9f2
SHA256

e9e600bee91c063346bc8087576924788a7524d7d690586df2a7ab0cd967f9f8
SHA512

0ab7c5ca8dc8b238439790be33e0025cd39f59c45388319d5a4d9df1c427a215869ee92d01229096d05dd160331f15b37e2e726dd8cd2f6f4ea2ee3118777dc2
SSDEEP

1536:iCWrCwJhYUAhcyHmTCAhELbq/m5MGEuiTFF:AOUicdeAKLo7xFF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07bf6fe35dc986c9256f861c6adb4a8a_JaffaCakes118

Files

07bf6fe35dc986c9256f861c6adb4a8a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

eed4c2d37139ca5b3cc228bf089f8af7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
lstrlenA
GetTickCount
GetSystemTime
lstrcpyA
GetLocalTime
GetLastError
CloseHandle
WriteFile
CreateFileA
FindAtomA
lstrcatA
lstrcpynA
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
GetVersion
LoadLibraryA
GetTempFileNameA
CreateMutexA
OpenMutexA
ExitProcess
lstrcmpA
GetCommandLineA
RtlUnwind
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

user32

IsWindowVisible
ClientToScreen
GetWindowRect
wsprintfA
EqualRect
GetCursorPos
InflateRect
GetFocus
GetCaretPos

shlwapi

SHGetValueA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE