30e17629d3ac5ee4bba1923e172f0467_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30e17629d3ac5ee4bba1923e172f0467_JaffaCakes118
Size

46KB
MD5

30e17629d3ac5ee4bba1923e172f0467
SHA1

463286639c0417aa1596a3fc62a6a42f9a122fc3
SHA256

f98fe242ea4a9fe402839a19d86276335467fb1b434256d3fdeb4455cdc7fcd9
SHA512

f2d08c703772c1739a6e33f3a24bbc66027a30d03c381320ee13004bb9d5ea457d0d98e30c134b2fd0755ce52ae119b3bfe09de05d2841087c9ac4f080685b90
SSDEEP

768:pAwNtnddCSdu8VzWbfokIoNF+90NxoCk6JQCLbHw0Oi3+Au7sZmZX15Uuk7lcwsD:pXNVddto88bfokDw96xCGbp3+xmuatje

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Label_Copy_UPS.exe

Files

30e17629d3ac5ee4bba1923e172f0467_JaffaCakes118
.zip
Label_Copy_UPS.exe
.exe windows:5 windows x86 arch:x86

4234eb7c3ebc160e84a277f90c05c504

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsCharLowerA
EnumChildWindows
SetWindowLongW
SetWindowTextA
IsCharAlphaW
GetDesktopWindow
GetActiveWindow
MoveWindow
DialogBoxParamA

ole32

CoRevokeClassObject
CoEnableCallCancellation

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

kernel32

GetTickCount
GetDateFormatA
LocalAlloc
GetTimeZoneInformation
SizeofResource
HeapDestroy
HeapFree
IsBadStringPtrW
SuspendThread
LoadResource
FindResourceExA
LocalFree
GetProcAddress
FreeLibrary
LoadLibraryA
DeleteCriticalSection
InitializeCriticalSection
HeapCreate

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ