775f3dccb6b9f1b931beeedf624d4e2e_JaffaCakes118 | Triage

Sharing

General

Target

775f3dccb6b9f1b931beeedf624d4e2e_JaffaCakes118
Size

17KB
MD5

775f3dccb6b9f1b931beeedf624d4e2e
SHA1

98af0de43992fcc5762039225acece83931a83d9
SHA256

d2904770824dceb05f3a32ae0e6a491194b1cbf873c306f531f904432de99dd4
SHA512

b7934da79b3b5d037caa784b59cdb22bd857d0e78372a0dbe47a130452926d2d2c4db7eabfc7c260934122ad9bef2e5c552541c2b23d93a56f69fb3711eb8184
SSDEEP

384:WJpoei6UDOwTGXSSPN2L3EQK07maITjagS:YpX0q3PNpNd7S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
775f3dccb6b9f1b931beeedf624d4e2e_JaffaCakes118

Files

775f3dccb6b9f1b931beeedf624d4e2e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

df6858634cebc4a111153b69cf1fa271

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetTickCount
MapViewOfFile
CreateFileA
OpenProcess
VirtualAlloc
GetOEMCP
CreateFileMappingA
RtlUnwind
TerminateProcess
UnmapViewOfFile
GetTempPathA
CloseHandle
VirtualQuery
GetLastError
VirtualFree
ExitProcess
LocalFree
FormatMessageA
ReadFile
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
IsDebuggerPresent

user32

wsprintfA
MessageBoxA
GetSystemMetrics

ole32

CoInitialize
CoTaskMemRealloc
CoUninitialize
CLSIDFromString
CoCreateInstance
CoTaskMemAlloc
StringFromGUID2
CoTaskMemFree

oleaut32

LoadTypeLi
LoadRegTypeLi

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ