7131f18299a024a0d2468702c9ba8202_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7131f18299a024a0d2468702c9ba8202_JaffaCakes118
Size

70KB
MD5

7131f18299a024a0d2468702c9ba8202
SHA1

c3eace2b2a902b0b1006d14120c9cf40a38104fd
SHA256

7f51f986d1c541ba93fedc4b2b90c270fc353e96a093695812c92395641da67c
SHA512

42864c757158536de8b5959cb28330aeeee7b49d470d1df8d461a5029d5d4d9dc619ccbd669a998ae7e903288e098cebcca97a5d0a5d686417ab6f7023483c97
SSDEEP

1536:cH7DBcXXz8XotGp1ByiyfEercsxj8mibq+NpXsOjsf3o:9XPkTyWsxj8mi2Ou3o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7131f18299a024a0d2468702c9ba8202_JaffaCakes118

Files

7131f18299a024a0d2468702c9ba8202_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5e385d423f088ca6548bd00ae6b3c35c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
lstrlenA
lstrcpyA
GetLocalTime
GetTickCount
GetSystemTime
FindAtomA
GetLastError
CloseHandle
WriteFile
CreateFileA
lstrcatA
lstrcpynA
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
GetVersion
LoadLibraryA
GetTempFileNameA
CreateMutexA
OpenMutexA
ExitProcess
lstrcmpA
GetCommandLineA
RtlUnwind
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

user32

GetCursorPos
InflateRect
GetWindowRect
wsprintfA
GetFocus
GetCaretPos
IsWindowVisible
ClientToScreen
EqualRect

shlwapi

SHGetValueA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE