81c8bbc5dc675e57296b79bcc3acda1b_JaffaCakes118 | Triage

Sharing

General

Target

81c8bbc5dc675e57296b79bcc3acda1b_JaffaCakes118
Size

105KB
MD5

81c8bbc5dc675e57296b79bcc3acda1b
SHA1

a898ade3d40c959c45ce3562b501b03692776162
SHA256

2a4177aa98bafa0257423834e09e63610c9bd94ea91744d9eb5ddf15419ff8f2
SHA512

a778c41017a505074311a3b9dc1037eb025eea3597d26f9c41007049be3c05ffdf6c3fcd468a7672788053a8fc82d41dcb3da9640564f853d9920f3fb7e11dbc
SSDEEP

3072:Nt+gWOZ4xwvUFr79i+g6Sra21WnkLV0Qap7+0vl:Nt+NBrSZcnkLV0QYN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81c8bbc5dc675e57296b79bcc3acda1b_JaffaCakes118

Files

81c8bbc5dc675e57296b79bcc3acda1b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c1227d46f61b02c179fe14c4d25832e4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

??1type_info@@UAE@XZ
??3@YAXPAX@Z
__CxxFrameHandler
_CxxThrowException
_except_handler3

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
ExitProcess
lstrcpyA
GetTempPathA
CloseHandle
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
GetLastError
lstrcatA
WriteFile
lstrcpynA
lstrlenA
lstrcmpA
CreateFileA

user32

GetFocus
wsprintfA
InflateRect
GetCursorPos
EqualRect
IsWindowVisible
ClientToScreen

shlwapi

SHGetValueA

gdi32

GetBkColor
GetBkMode

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 81KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE