095818a8f9275b0cf71a820b50a92a83_JaffaCakes118 | Triage

Sharing

General

Target

095818a8f9275b0cf71a820b50a92a83_JaffaCakes118
Size

98KB
MD5

095818a8f9275b0cf71a820b50a92a83
SHA1

248dfeb6891678138218b93a083e2ee22882f915
SHA256

c9e3b01ac3a42ec087ef7ef1ecc86188750571e581b44f2e958c92eceb4a9107
SHA512

fb186655365f01ecee50fe92a37451ce7cdc3c7c6d5731412a45e1217ebd1f2bc4574fa0ff4d082c0aff1b472bcf009e997d88e6168fbb18481a7230c8d46d84
SSDEEP

3072:4GpX2uxAIyNJYE8n4hKgqanNO1rPNLi5:4GptQJC4EgPnNGPNL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
095818a8f9275b0cf71a820b50a92a83_JaffaCakes118

Files

095818a8f9275b0cf71a820b50a92a83_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c1227d46f61b02c179fe14c4d25832e4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

??1type_info@@UAE@XZ
??3@YAXPAX@Z
__CxxFrameHandler
_CxxThrowException
_except_handler3

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
ExitProcess
lstrcpyA
GetTempPathA
CloseHandle
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
GetLastError
lstrcatA
WriteFile
lstrcpynA
lstrlenA
lstrcmpA
CreateFileA

user32

GetFocus
wsprintfA
InflateRect
GetCursorPos
EqualRect
IsWindowVisible
ClientToScreen

shlwapi

SHGetValueA

gdi32

GetBkColor
GetBkMode

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE