099864424b3cf5873e43c63600780c2b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

099864424b3cf5873e43c63600780c2b_JaffaCakes118
Size

76KB
MD5

099864424b3cf5873e43c63600780c2b
SHA1

3072e7ef9f0067f529d47d6b5638c49797069f9b
SHA256

5d09917be98b818dbea1c709cecb5d7fd7b9c5ceb367daf520867152431d93b3
SHA512

0b49251d22b7b1864651f49024d4372111fad26a439ca4b06c3f66b5d8dc0fdbe7d00f87bdab42b5fc90e3879d75356224ddd29d0046b488d28286870912e964
SSDEEP

1536:ZiC+ypqMHKbjvQSy/YyZV9+GUnsYwPG7S+:Zzp/HKbLyAyV+GIsf+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
099864424b3cf5873e43c63600780c2b_JaffaCakes118

Files

099864424b3cf5873e43c63600780c2b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1862005fc1507ebf5e59743292ce1793

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
GetTickCount
GetSystemTime
lstrcpyA
GetVersion
GetTempPathA
GetLocalTime
CloseHandle
WriteFile
CreateFileA
lstrcatA
lstrcpynA
GetModuleFileNameA
FindAtomA
GetProcAddress
GetModuleHandleA
GetLastError
LoadLibraryA
GetTempFileNameA
CreateMutexA
OpenMutexA
ExitProcess
lstrcmpA
GetCommandLineA
RtlUnwind
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

user32

IsWindowVisible
ClientToScreen
InflateRect
wsprintfA
GetCursorPos
GetFocus
GetWindowRect
EqualRect
GetCaretPos

shlwapi

SHGetValueA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE