d020c5fd8befbb4bb3b6c7fd08ea16cc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d020c5fd8befbb4bb3b6c7fd08ea16cc_JaffaCakes118
Size

67KB
MD5

d020c5fd8befbb4bb3b6c7fd08ea16cc
SHA1

0dca567d4be881acf9f829f612b465e9ef5b908b
SHA256

12a709d10f9bd57b4b5eafce75111086e0decf69ad3c1d26d4715de6e2782d90
SHA512

cb78485bac33f12ecdae3a6c78e36ad136db545dbe1dd0144c51beed3572b517b18ecb10ed170a0c102fa9595d32705112fa3dcda852d9ae8cf8d7e5d9b749f5
SSDEEP

1536:Vx6HU7LJ7xeCtaK3LDJyNBA/j9tZgyLcckSO12:VKU7LJdvRiQbc/2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d020c5fd8befbb4bb3b6c7fd08ea16cc_JaffaCakes118

Files

d020c5fd8befbb4bb3b6c7fd08ea16cc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

01d3ae82405b57187ea050e05677bd82

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
lstrcpyA
CloseHandle
WriteFile
CreateFileA
lstrcatA
lstrcpynA
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
LoadLibraryA
GetTempPathA
CreateMutexA
OpenMutexA
ExitProcess
lstrcmpA
RtlUnwind
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

user32

wsprintfA

shlwapi

SHGetValueA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE