83541cbe0f64736ae8181140b2b30040_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83541cbe0f64736ae8181140b2b30040_JaffaCakes118
Size

7KB
MD5

83541cbe0f64736ae8181140b2b30040
SHA1

3b0fa60ee399eb5d21e34690f65fb84fb51e25e5
SHA256

63cdddc8b849d1066179809d95e816b947f4356b6b1c63c8ea085f34118510cd
SHA512

43af63a5993b4b6faa5554efbf012de6ec81bfccf9ae8c42ff8fc1c424f6cc3149d6fc1c6fa759601ef94b2c8e933fe7e401de575987ec43183288a684fe6fc1
SSDEEP

192:/Q+t4axViDNlWhETYznmvQLFjuqNFPwt8BxJU7W:/elJTonHL4iFP68B7U7W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83541cbe0f64736ae8181140b2b30040_JaffaCakes118

Files

83541cbe0f64736ae8181140b2b30040_JaffaCakes118
.exe windows:4 windows x86 arch:x86

239ecb536f151e72ded5d450c41edb2f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
FindFirstFileA
CreateProcessA
GetProcAddress
lstrcatA
GetStartupInfoA
FreeLibrary
LoadLibraryA
CreateDirectoryA
Sleep
CreateFileA
GetACP
DeleteFileA
ReadFile
SetFilePointer
GetFileSize
GetTempFileNameA
GetSystemDirectoryA
GetModuleFileNameA
GetTempPathA
GetShortPathNameA
GetLastError
CreateMutexA
lstrcpynA
HeapAlloc
GetProcessHeap
HeapFree
lstrcmpiA
ExitProcess

user32

GetActiveWindow
wsprintfA
GetCapture

gdi32

GetBkColor
CreateCompatibleBitmap
CreateCompatibleDC
GetBrushOrgEx
GetBkMode

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 82B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE