ada44bd4ed169bf5e3436d77e457e8b2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ada44bd4ed169bf5e3436d77e457e8b2_JaffaCakes118
Size

66KB
MD5

ada44bd4ed169bf5e3436d77e457e8b2
SHA1

8e9b396a2d49601a6ad5c7d03983f8ccd15d5f27
SHA256

59b5ad0424f9f7ce05076ca5c9496f4bb1174932bba66c73505db940b4e15fde
SHA512

8cc9b1ce10525be8cf3c94c1d33257bdf0f87d5bfbc55013d13018f86154d3eedc60732ef4c6902a4dc0d9436188d789c414e71b16fd73aad5176a8796e0460f
SSDEEP

1536:Blu49ukb9FJv+pD4YmRaSEMsjqioidOH07rp6YHP8:AkbbJEDfmDg7LOwhk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ada44bd4ed169bf5e3436d77e457e8b2_JaffaCakes118

Files

ada44bd4ed169bf5e3436d77e457e8b2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ace7e6441a1baf53fea81565cb374587

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindAtomA
GetVersion
lstrlenA
GetTickCount
lstrcpyA
GetLastError
GetSystemTime
GetTempPathA
CloseHandle
WriteFile
CreateFileA
lstrcatA
lstrcpynA
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
GetLocalTime
LoadLibraryA
GetTempFileNameA
CreateMutexA
OpenMutexA
ExitProcess
lstrcmpA
GetCommandLineA
RtlUnwind
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

user32

ClientToScreen
GetWindowRect
InflateRect
GetCaretPos
GetCursorPos
EqualRect
IsWindowVisible
GetFocus
wsprintfA

shlwapi

SHGetValueA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE