788d5b0dbdd3f9f93482b38799b82a0f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

788d5b0dbdd3f9f93482b38799b82a0f_JaffaCakes118
Size

267KB
MD5

788d5b0dbdd3f9f93482b38799b82a0f
SHA1

0e11fc7ac7bfa3a189e0cc21a06a5b21866651b8
SHA256

f30a1001ac27729d474200d9d4a33c27ca08409bc5a77cdcf6dcec581fbdf4a2
SHA512

fe8c8ed752532819294dfefc28132f3dce25bb5aa6764ac465ef50a86dd30031936af6019aa6540acc3f7a42ecdcb453aab05510679260bf0d4397052a54e919
SSDEEP

6144:plusa/o6iWdUXaicWlY0XJDmQXGvrJU2x30:1aE/5lbahvrJP30

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
788d5b0dbdd3f9f93482b38799b82a0f_JaffaCakes118

Files

788d5b0dbdd3f9f93482b38799b82a0f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6c1d2d6fbbd8e8dc38a56ae04de6f7b1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
CloseHandle
WriteFile
CreateFileA
GetTickCount
GetLastError
lstrcatA
lstrcpynA
lstrlenA
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
GetSystemTime
GetTempPathA
GetVersion
FindAtomA
WaitForSingleObject
CreateProcessA
lstrcpyA
GetTempFileNameA
lstrcmpA
ExitProcess
RtlUnwind
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

user32

wsprintfA
GetCursorPos
ClientToScreen
InflateRect
GetFocus
IsWindowVisible
GetWindowRect
GetCaretPos
EqualRect

shlwapi

SHGetValueA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 253KB - Virtual size: 253KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE