dd3dc5980d375ee94dbd975749a03a52_JaffaCakes118 | Triage

Sharing

General

Target

dd3dc5980d375ee94dbd975749a03a52_JaffaCakes118
Size

97KB
MD5

dd3dc5980d375ee94dbd975749a03a52
SHA1

cc0a461fa93db27123770de7277437b4ff04b002
SHA256

48e5de2484e584669ee217c3eabf88f2598a17e40b3a33cb076586f9e4dc9406
SHA512

166bd4a9ddba91658ad99dc18bbd5c596393c4c5c27337e0c0975a00eb8eb91a7b6ed63a3efd2158d34b95408066c2a5c2bfbacff7f6305e9c3bb25e8bf6a454
SSDEEP

1536:XRt4sooF0BWSKnwpId9CpWoAPlzTu78/H0VmK/ifTUqwg1Pr:Xj70dWnd8WoAJqYhRwgNr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd3dc5980d375ee94dbd975749a03a52_JaffaCakes118

Files

dd3dc5980d375ee94dbd975749a03a52_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c1227d46f61b02c179fe14c4d25832e4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

??1type_info@@UAE@XZ
??3@YAXPAX@Z
__CxxFrameHandler
_CxxThrowException
_except_handler3

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
ExitProcess
lstrcpyA
GetTempPathA
CloseHandle
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
GetLastError
lstrcatA
WriteFile
lstrcpynA
lstrlenA
lstrcmpA
CreateFileA

user32

GetFocus
wsprintfA
InflateRect
GetCursorPos
EqualRect
IsWindowVisible
ClientToScreen

shlwapi

SHGetValueA

gdi32

GetBkColor
GetBkMode

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE