6f3545dbd95556e1ecde13e4c8b1f5f5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f3545dbd95556e1ecde13e4c8b1f5f5_JaffaCakes118
Size

9KB
MD5

6f3545dbd95556e1ecde13e4c8b1f5f5
SHA1

67f6e5005d0e19bbe62892eefd51076dd5e3ee1f
SHA256

869495377015eb101a94075a3e79e129d8c44ddaf11a7a2c80353426feb516aa
SHA512

d3b2df0b0d87a086d75e025eae4d2d88de7e9b9e527b0c63b08feffca855242c081f1e638733dece276d6dc6319a15f5e6bbfdd44b9dcd55851eb12ca097b0a8
SSDEEP

96:WPVXs0x2BKdIqpQ5+3upextWvimgsJVksoWx7a5p4YlRRj8Wraj71Di/lYfAfpQO:+VzUBiIqpQC7WqmxaOx4YoxTzaxWYw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f3545dbd95556e1ecde13e4c8b1f5f5_JaffaCakes118

Files

6f3545dbd95556e1ecde13e4c8b1f5f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e80e47dd49911fcf9ab6d3dd29a5e862

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynA
GetTickCount
GetSystemDirectoryA
GetModuleFileNameA
GetTempPathA
GetShortPathNameA
GetCurrentProcessId
GetCurrentThread
GetProcAddress
GetLastError
CreateMutexA
Sleep
CloseHandle
HeapAlloc
lstrcmpiA
CreateDirectoryA
DeleteFileA
ReadFile
SetFilePointer
GetFileSize
GetTempFileNameA
FreeLibrary
LoadLibraryA
FindFirstFileA
CreateProcessA
lstrcatA
GetStartupInfoA
GetProcessHeap
HeapFree
CreateFileA
ExitProcess

user32

SetActiveWindow
GetActiveWindow
wsprintfA
GetCapture

gdi32

CancelDC
CreateCompatibleDC
GetBkMode

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ