89fafe16e1b02883ea9f070079f205de_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89fafe16e1b02883ea9f070079f205de_JaffaCakes118
Size

42KB
MD5

89fafe16e1b02883ea9f070079f205de
SHA1

966742f4330078ea302d403243a268a3648c1160
SHA256

ced7a08b0dd8238dc5d1e9616daf1ecfc32c09ca95b103f73dbc9d9f644ce97e
SHA512

5ed2af16f4a96e4a4e361364f1cd43c859a19191851802a907d76876fd3f8b5739ad0e25ca90c8a83d353caa601e44b310cd436d8dde78f4d8079aad79ba4169
SSDEEP

768:bHr5l0rUXiz4uK12z5VQ2jc/F0jv2TISbjd4Dx0rlIqirX+GYNYroHICQL:3kQXir1VRc/F0jeESXNrlGX+GoaoH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89fafe16e1b02883ea9f070079f205de_JaffaCakes118

Files

89fafe16e1b02883ea9f070079f205de_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9a123cc17893aa850833121e022871ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynA
GetModuleHandleA
CreateMutexA
CloseHandle
GetTickCount
GetVersion
GetTempPathA
GetSystemTime
WriteFile
GetCommandLineA
lstrcpyA
lstrcatA
GetLastError
GetProcAddress
VirtualAlloc
GetTempFileNameA
GetLocalTime
LoadLibraryA
OpenMutexA
ExitProcess
CreateFileA
FindAtomA
lstrcmpA
lstrlenA
GetModuleFileNameA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
VirtualQuery
GetVersionExA
RtlUnwind
IsDebuggerPresent

user32

GetFocus
InflateRect
ClientToScreen
GetCursorPos
GetCaretPos
GetWindowRect
EqualRect
IsWindowVisible
wsprintfA

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE