77f5f0406642f8f53a5cd361800c4f49_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77f5f0406642f8f53a5cd361800c4f49_JaffaCakes118
Size

76KB
MD5

77f5f0406642f8f53a5cd361800c4f49
SHA1

1a2513a166b8b49df2ade6a8d36d624b086eac6e
SHA256

637672272d0e77b159c8935120a02b811ef747fe1254376f52cf221125521b91
SHA512

180e8717489d6625da4501d22f0cf082df3a0f67fd746e96e2358f299ed68559b626e4464e6753030946ed932f0c94f01d58f96dbea944a5d43e9707a8c36f82
SSDEEP

1536:+oEXzap+6ByQRFs0Lsnb6U3AGq9pI3USQZXOFh:2mRyQfsL6U3AHjI3GOv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77f5f0406642f8f53a5cd361800c4f49_JaffaCakes118

Files

77f5f0406642f8f53a5cd361800c4f49_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5c5d69d882d1064e30d3b03fce70e7e7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
lstrlenA
GetLastError
lstrcpyA
GetLocalTime
GetVersion
FindAtomA
CloseHandle
WriteFile
CreateFileA
GetSystemTime
lstrcatA
lstrcpynA
GetModuleFileNameA
GetProcAddress
GetTickCount
GetModuleHandleA
LoadLibraryA
GetTempFileNameA
CreateMutexA
OpenMutexA
ExitProcess
lstrcmpA
GetCommandLineA
RtlUnwind
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

user32

IsWindowVisible
wsprintfA
GetCaretPos
GetCursorPos
EqualRect
GetWindowRect
ClientToScreen
InflateRect
GetFocus

shlwapi

SHGetValueA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE