63b571fe8f5279728065fe9283d53ecc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63b571fe8f5279728065fe9283d53ecc_JaffaCakes118
Size

89KB
MD5

63b571fe8f5279728065fe9283d53ecc
SHA1

23d1642c6351b69b94452de96d22b66cecc4d9d8
SHA256

9b50473f1e89a344e4c6c1339913374b9ea9f5329cadaf214660355fceb225f5
SHA512

dccbc60b7181c355cb437b75f6772d1f87b187308ad42c399f898b605051dccfd517902c4b1aa4ec1104c73a13a4ad0334958914c7bbfc9565d4ae504a3e1334
SSDEEP

1536:hTTq5/ua4D/aTJ60jyOQTSEpa4/7Yk8UK0zV3tI7XuEwPBWZIbUvveKmkbIj:5TUWiTJRjuGyj8k9ptI7XABuMUOi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63b571fe8f5279728065fe9283d53ecc_JaffaCakes118

Files

63b571fe8f5279728065fe9283d53ecc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

339803586297605f697b5b8d02d65518

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameA
LocalFree
GetCurrentProcessId
ExitProcess
SleepEx
GetStdHandle
GetCurrentThread
GetCurrentDirectoryA
GetSystemDirectoryA
CreateMutexA
GetCurrentProcess
LocalAlloc
CreateEventA
GetCurrentThreadId
VirtualAlloc
GetWindowsDirectoryA

advapi32

GetUserNameA

user32

GetSystemMetrics
GetForegroundWindow
GetActiveWindow

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ