5aa1015e2757f34254081a10581ad4ed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5aa1015e2757f34254081a10581ad4ed_JaffaCakes118
Size

53KB
MD5

5aa1015e2757f34254081a10581ad4ed
SHA1

f67573e95a9e1cbc850b1c354018c1eb7c3f3d53
SHA256

9ec8264d63516d6fbba76d0b5ebec82fd819f2497fb1763985a153128379cdd0
SHA512

cb96c1f4595ee4195c448483a24fc77677e2adb67a30626012d202c3f63f688ea9d83fdb36ead8ffd9e7371332f8a003294b0b623445e5cc13c5639e94ee36a6
SSDEEP

1536:2a6WZsSSMVkRc1wVqbR6OnkllrMEJZuDfKnn:2gNVkRc1wVqb4On0rpJZuDf+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5aa1015e2757f34254081a10581ad4ed_JaffaCakes118

Files

5aa1015e2757f34254081a10581ad4ed_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b1e1fe0c7ef4e3d22a3c683db92c8572

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTime
lstrlenA
GetVersion
GetLastError
GetTempPathA
lstrcpyA
GetLocalTime
FindAtomA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcatA
lstrcpynA
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
LoadLibraryA
GetTempFileNameA
CreateMutexA
OpenMutexA
ExitProcess
lstrcmpA
GetCommandLineA
RtlUnwind
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

user32

GetCursorPos
GetFocus
ClientToScreen
wsprintfA
IsWindowVisible
EqualRect
GetWindowRect
InflateRect
GetCaretPos

shlwapi

SHGetValueA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE