0fd71462cfe21a32a8c78da2bffc4a25_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fd71462cfe21a32a8c78da2bffc4a25_JaffaCakes118
Size

64KB
MD5

0fd71462cfe21a32a8c78da2bffc4a25
SHA1

04b6aa1f88cfaf5df19f8098096eff785ee0e8f2
SHA256

53c27823da621c028979004d72d369626fb4f1f0013301b36f81f56d46faae37
SHA512

8a6e5f37a6d3abef8ee9e08c78e55a9bcfe42b764fafac28b13beeb7e7728ac4fb028c082431c33bc62906297d49b194be0dd811ac3ac77019d9f5941a670fdb
SSDEEP

1536:w/H9/o42gDqnYoV/Mtr9NKI5wMQVWdlFVG0PcxYa+DhV5awkO9RR:Yb2QGd8ff3DNP9aca5sRR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fd71462cfe21a32a8c78da2bffc4a25_JaffaCakes118

Files

0fd71462cfe21a32a8c78da2bffc4a25_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2ce6a3c24e78a55afa81935c6ec63c14

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
lstrlenA
lstrcpyA
GetTempPathA
GetLocalTime
GetVersion
GetTickCount
CloseHandle
WriteFile
FindAtomA
CreateFileA
lstrcatA
lstrcpynA
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
GetSystemTime
LoadLibraryA
GetTempFileNameA
CreateMutexA
OpenMutexA
ExitProcess
lstrcmpA
GetCommandLineA
RtlUnwind
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

user32

InflateRect
GetCaretPos
GetWindowRect
wsprintfA
EqualRect
GetFocus
GetCursorPos
IsWindowVisible
ClientToScreen

shlwapi

SHGetValueA

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE