153f5a4eea2f2d9c2b37d4e39c329bc0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

153f5a4eea2f2d9c2b37d4e39c329bc0_JaffaCakes118
Size

96KB
MD5

153f5a4eea2f2d9c2b37d4e39c329bc0
SHA1

54f780d4157d2683b0652089c595e644bab7c919
SHA256

ccae2ed45203b885cec9018369c66fb7a91a358e678bf15a18dbd372a06d95d7
SHA512

f036dd0354733ca983690f8c08e985b17daa70d9739b2918a5a71d2f673e4870678fb329627d499188a8ba1e847ae1ed9d7d80ec5dd7c355e02ba2388b37e577
SSDEEP

1536:9bLp9OHtGgl3oDxkABpd/SBCV1V535eNeOKUU0z10s7lOvqLG0ggn:FTe1KxkgphrhWeOKU997

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
153f5a4eea2f2d9c2b37d4e39c329bc0_JaffaCakes118

Files

153f5a4eea2f2d9c2b37d4e39c329bc0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c1227d46f61b02c179fe14c4d25832e4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

??1type_info@@UAE@XZ
??3@YAXPAX@Z
__CxxFrameHandler
_CxxThrowException
_except_handler3

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
ExitProcess
lstrcpyA
GetTempPathA
CloseHandle
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
GetLastError
lstrcatA
WriteFile
lstrcpynA
lstrlenA
lstrcmpA
CreateFileA

user32

GetFocus
wsprintfA
InflateRect
GetCursorPos
EqualRect
IsWindowVisible
ClientToScreen

shlwapi

SHGetValueA

gdi32

GetBkColor
GetBkMode

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 81KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE