09c3cc12712788d1651dfd81c291df0e_JaffaCakes118 | Triage

Sharing

General

Target

09c3cc12712788d1651dfd81c291df0e_JaffaCakes118
Size

22KB
MD5

09c3cc12712788d1651dfd81c291df0e
SHA1

aa4808b6736568edbb82bb6f0fe5d1a5f1300f8a
SHA256

dbbb6a948acc00349ad1dc9b3fe4b1ef871c38cc4e91225664ce91853037531d
SHA512

f5bdf42a22765d71ac699194697807e7d48cecc57f3665ec3a8050402d8b69e0a2197339aa745b667e6e1a4775772fd1d670f9e4714fb57638e0c957b2a681a5
SSDEEP

384:P3n0rzXQUlMlT8nvzDu340tRb+GI4Hz9JKyYt1/NeLNek+vDY:P3KzXQU+lT8nLUp+p4Hz9MRC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09c3cc12712788d1651dfd81c291df0e_JaffaCakes118

Files

09c3cc12712788d1651dfd81c291df0e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

920e399de2f8acd283d875443955f986

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrToIntA

kernel32

FormatMessageA
SetUnhandledExceptionFilter
GetLastError
GetWindowsDirectoryA
RaiseException
WaitForMultipleObjects
CreateEventA
RtlUnwind
CreateFileA
SetEvent
CloseHandle
GetCPInfo
ResetEvent
CreateMutexA
GetFileSize
GetFullPathNameA
lstrcpyA
ExitProcess
LocalFree
IsDebuggerPresent
ReadFile
VirtualAlloc
GetModuleHandleA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess

user32

wsprintfA
MessageBoxA
SetWindowPos
GetWindow
GetParent
CreateWindowExA

ole32

CoUninitialize
CoInitialize

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ