5ef7c5b77fd48569f5a6b39f405fbbd6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ef7c5b77fd48569f5a6b39f405fbbd6_JaffaCakes118
Size

50KB
MD5

5ef7c5b77fd48569f5a6b39f405fbbd6
SHA1

3462792d5d41823e36ba06450eade022d2bee43d
SHA256

9b2289da54a0a6360a5d65a2d0010d4c3bfe10f8eb99b916ba7d6ade4715b231
SHA512

aa198e321e2d230b2374cf7c76bcd7f9b465f8becc2754a84937db4161f098d553e435f05baf73cd993f1da1385e9e946c8a02e18a485a41edcf5a4dd558479a
SSDEEP

1536:OYO80PUpZBNeaIgj6tXSeCRbwmtK3c/oaeHmKZNXsQp:OYzLNNealj6D9WKs1e/ZHp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Label_Copy_UPS.exe

Files

5ef7c5b77fd48569f5a6b39f405fbbd6_JaffaCakes118
.zip
Label_Copy_UPS.exe
.exe windows:5 windows x86 arch:x86

1670646450025fb305620d1046fac1da

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsCharUpperW
EnumDesktopWindows
IsCharAlphaNumericA
SetWindowRgn
ValidateRect
GetThreadDesktop
SetClassLongA
GetActiveWindow

ole32

OleSetClipboard
CoRevokeClassObject
IIDFromString

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

kernel32

GlobalHandle
HeapDestroy
LocalAlloc
HeapFree
SizeofResource
GetThreadContext
LocalFree
LoadLibraryA
GetProcAddress
LoadResource
FindResourceExW
HeapCreate
GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeLibrary

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ