6fe9d60f018a5482aef63263e29e3afe_JaffaCakes118 | Triage

Sharing

General

Target

6fe9d60f018a5482aef63263e29e3afe_JaffaCakes118
Size

61KB
MD5

6fe9d60f018a5482aef63263e29e3afe
SHA1

8e272c8e9d7a756887314bd6e2a78233bf9285b1
SHA256

8ff22d645a321931496b1b7bb454cceaeec341fb74bc725004b03ec2da420b12
SHA512

62da4b50c1ed38e0f94e4aeac15ec663ac63962a37d891892591a70b3130c56b99be7874a39bf2176f60cfe7160283a3e209891e80bc3bff02346104338489ba
SSDEEP

1536:ejJEPbaG87yNbm1t2YEGehpwYf1J2GmkRFnPvtgcUtjsnfltc:QJEPumot2+KKYz2sRoutc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fe9d60f018a5482aef63263e29e3afe_JaffaCakes118

Files

6fe9d60f018a5482aef63263e29e3afe_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a194d16f6db137fedcc9a97fc9260d33

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
FindAtomA
lstrcpyA
lstrlenA
GetSystemTime
GetTempPathA
GetLocalTime
CloseHandle
WriteFile
CreateFileA
GetLastError
lstrcatA
lstrcpynA
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
GetTickCount
LoadLibraryA
CreateMutexA
OpenMutexA
ExitProcess
lstrcmpA
RtlUnwind
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

user32

GetFocus
EqualRect
wsprintfA
IsWindowVisible
ClientToScreen
GetWindowRect
GetCursorPos
GetCaretPos
InflateRect

shlwapi

SHGetValueA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE