d41b77eaa368882b2fa85d4cea1482b1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d41b77eaa368882b2fa85d4cea1482b1_JaffaCakes118
Size

90KB
MD5

d41b77eaa368882b2fa85d4cea1482b1
SHA1

d06b32262dca095a39b22ae62df90d6b31390a80
SHA256

1b126d6a52e2ef02d5a83773691c97586d18b0f252be6619e08329af629745ef
SHA512

f0a122a45df37a31b17e962b043269132906a9420d3d781f0ac1f4ad559dbc229adde912fb3a055d1fbfaa7204e72b1390b810861be4322afcf4a4d2564f011e
SSDEEP

1536:cKgVPq4HZ4ZrTEbj6bGcvuFS+sA6P1jrrjCD98v2WCkjq0x6akipCy7m:cKOy458TXbGcvuk+V6PBa98YkW0x6spq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d41b77eaa368882b2fa85d4cea1482b1_JaffaCakes118

Files

d41b77eaa368882b2fa85d4cea1482b1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c5d4a0b8f79087eaf0898a16b6d37202

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrToIntA

kernel32

GetTimeZoneInformation
SetUnhandledExceptionFilter
LoadLibraryA
GetLocalTime
GetLastError
VirtualQuery
LCMapStringA
TerminateProcess
VirtualProtect
GetCPInfo
LoadLibraryExA
OpenProcess
CompareStringA
FreeLibrary
GetSystemTime
VirtualAlloc
GetOEMCP
VirtualFree
IsDebuggerPresent
ExitProcess
LocalFree
FormatMessageA
ReadFile
CreateFileA
GetModuleHandleA
UnhandledExceptionFilter
GetCurrentProcess

user32

GetWindowRect
GetClientRect
wsprintfA
MessageBoxA
GetWindow

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1006B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ