2403895b82434531840ba37d736ed392_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2403895b82434531840ba37d736ed392_JaffaCakes118
Size

75KB
MD5

2403895b82434531840ba37d736ed392
SHA1

6f77ce287c0a562b53544ad010340030fdc35774
SHA256

579011ebc8a4986eac3c3b732953f4979bfdc637e455481065b503007bb92850
SHA512

4f358ece1ad6d3dad5766afaa0352e26f67ad1ddfc58a1c7a0fed55b5ff218ebd5eee6a8e6f567967348f6c9e11d69a5bdfa1a443b7fcc797c80c2e7c8ad2b9a
SSDEEP

1536:OjKGCFDVhRsb7JJRpNPYAa61INu+iwOuaWKgWtLjBQ9FqV7JHGF:FzRchpdavNuDwOu1GLK9opcF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2403895b82434531840ba37d736ed392_JaffaCakes118

Files

2403895b82434531840ba37d736ed392_JaffaCakes118
.exe windows:5 windows x86 arch:x86

845a97602b62a976d3d0dfe972ed1e35

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
lstrlenA
GetTickCount
lstrcpyA
FindAtomA
GetSystemTime
GetTempPathA
CloseHandle
WriteFile
CreateFileA
GetLastError
lstrcatA
lstrcpynA
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
GetLocalTime
LoadLibraryA
GetTempFileNameA
CreateMutexA
OpenMutexA
ExitProcess
lstrcmpA
GetCommandLineA
RtlUnwind
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

user32

EqualRect
InflateRect
ClientToScreen
IsWindowVisible
GetFocus
GetWindowRect
GetCursorPos
GetCaretPos
wsprintfA

shlwapi

SHGetValueA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE