689667e47887351c9df00b2153c944c5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

689667e47887351c9df00b2153c944c5_JaffaCakes118
Size

87KB
MD5

689667e47887351c9df00b2153c944c5
SHA1

3c1079d228f17a5a7a69a037540c1a9ff5a3c764
SHA256

d3fc75539249666234089813f4adc428433c8e59499185dad2f542f5900eba4b
SHA512

eee75e3ce10776c842f38e39f562e73e9cc60fae137d2035e5dc150c6864e5c4a0dad2b9e94d4c9cf6d0e19499825dd25c6490724a8fe0506b79a009f15ea62d
SSDEEP

1536:ZP5/oMgSzRYMtKFIyuaRKW5X6HFLwLFBMi+4yuNqB/lo:LyBRx6HF8/Mi+VjBu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
689667e47887351c9df00b2153c944c5_JaffaCakes118

Files

689667e47887351c9df00b2153c944c5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

31573079fefd1240a8c29f9f7f8fa654

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindAtomA
GetLastError
lstrcpyA
lstrlenA
GetVersion
GetTempPathA
GetSystemTime
GetTickCount
CloseHandle
WriteFile
CreateFileA
lstrcatA
lstrcpynA
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
GetLocalTime
LoadLibraryA
CreateMutexA
OpenMutexA
ExitProcess
lstrcmpA
RtlUnwind
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

user32

wsprintfA
EqualRect
InflateRect
GetCursorPos
GetWindowRect
GetCaretPos
IsWindowVisible
GetFocus
ClientToScreen

shlwapi

SHGetValueA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE