d0a7501025d210101c70556d8de17d9d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0a7501025d210101c70556d8de17d9d_JaffaCakes118
Size

72KB
MD5

d0a7501025d210101c70556d8de17d9d
SHA1

2ef2855a1fd4920fdbf711fde7d94991013f91c5
SHA256

d0d1bf52178c5ca778598dd16572da3cd4fd0d89e5de02bb2780d1cd7d4337ba
SHA512

3d6b9ed1f05a0ce3645b24cd1e651618affdfca5877b953ac7f2cfcc10693f3c862680c20b663994594be1d6bf6b58c713e76e4510cf6573302553390190b098
SSDEEP

1536:ru+/l2JHOVfQVc36FjdYgxST5aYQaY2i8m1gn8wljfuHu3nXKv3N:C+FVYVc36F+aYQzFgn8wpAu36vd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0a7501025d210101c70556d8de17d9d_JaffaCakes118

Files

d0a7501025d210101c70556d8de17d9d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

089860fccfac2f0f7a99eafcfa2d3046

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

OpenSCManagerW

kernel32

GetOEMCP
GetACP
GetCurrentThreadId
Sleep
DeviceIoControl
LoadResource
GetModuleHandleA
GetEnvironmentStrings
ExitProcess
LCMapStringW
GetVersion
SetStdHandle
VirtualProtect
GetStartupInfoA
GlobalUnlock
SetConsoleCP
SetFilePointer
DeleteFileA
GetTempFileNameA
HeapAlloc
VirtualAlloc
GetCommandLineA

msvcrt

wcstoul
??_V@YAXPAX@Z
_adjust_fdiv

user32

GetWindowTextA
GetClassNameW
ClientToScreen
MessageBoxA
LoadStringW
SetWindowLongW
PostMessageW

ole32

CoUninitialize

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE