714d87a456d07c71218aced877539929_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

714d87a456d07c71218aced877539929_JaffaCakes118
Size

70KB
MD5

714d87a456d07c71218aced877539929
SHA1

760156482fb94eeb900ba40719391c51138378ab
SHA256

7a454ee633753900f714e7625f33d0c9e7ce174e356d6c69ebf539a2608cf973
SHA512

1843b965e291424285339ad2b9d2d63d1c31148f93290f8ca22a6592f14b565e9b774ebc6f98de983c9a8e5ec77100aa770cb9da510d83565afcdc4dcb3671ce
SSDEEP

1536:hKg9n6IpuS/1aWjDKTNHQBE3NQlA/lcpuXY+:b96CaW+NHQBE3NQuqD+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
714d87a456d07c71218aced877539929_JaffaCakes118

Files

714d87a456d07c71218aced877539929_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a855a885302248861c6c831dbafaec45

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
lstrlenA
GetTickCount
lstrcpyA
GetTempPathA
GetSystemTime
FindAtomA
CloseHandle
WriteFile
CreateFileA
GetLastError
lstrcatA
lstrcpynA
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
LoadLibraryA
GetTempFileNameA
GetLocalTime
CreateMutexA
OpenMutexA
ExitProcess
lstrcmpA
GetCommandLineA
RtlUnwind
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

user32

IsWindowVisible
GetCaretPos
GetWindowRect
GetCursorPos
EqualRect
InflateRect
GetFocus
ClientToScreen
wsprintfA

shlwapi

SHGetValueA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE