c0633e147190c6a70ce9b2e73a8a9d0e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0633e147190c6a70ce9b2e73a8a9d0e_JaffaCakes118
Size

52KB
MD5

c0633e147190c6a70ce9b2e73a8a9d0e
SHA1

92f4a5cae2c3f69df31ef05ad422f45632cf818e
SHA256

bae97c9f8c54cad72013d935116bb8b79ff49ed105ecf7c5883832192b379952
SHA512

22a16dbeb25e830fb373200b442306e220bbcd88f8b919f29ff6b6234682bad935000305d409043aa1d6229bc5aa23da6183afa7e18a15d40e13f1374e7e13a8
SSDEEP

768:glxrfLEJiED+Tg/lU3wZoqGzAlqHSf9nRNt0nGP/GSB3yZ6KrbP:glxrjKUAZoqGzA+SPr0nWuSCrb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0633e147190c6a70ce9b2e73a8a9d0e_JaffaCakes118

Files

c0633e147190c6a70ce9b2e73a8a9d0e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

164cfcac541a7ac8708f5df850d78093

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CreateFileA
lstrcmpA
lstrlenA
lstrcpynA
GetTickCount
WriteFile
GetCommandLineA
lstrcatA
GetLastError
GetProcAddress
VirtualAlloc
GetTempFileNameA
GetLocalTime
LoadLibraryA
OpenMutexA
FindAtomA
GetModuleFileNameA
GetModuleHandleA
CreateMutexA
CloseHandle
GetVersion
GetTempPathA
GetSystemTime
lstrcpyA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
VirtualQuery
RtlUnwind
IsDebuggerPresent

user32

GetWindowRect
ClientToScreen
wsprintfA
InflateRect
GetCursorPos
GetCaretPos
EqualRect
IsWindowVisible
GetFocus

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE