dcf54c794e39d91ac76ff4bc972ad799_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dcf54c794e39d91ac76ff4bc972ad799_JaffaCakes118
Size

52KB
MD5

dcf54c794e39d91ac76ff4bc972ad799
SHA1

1d1640c2475b35623793510be36ac92af1f60fc4
SHA256

03a28818430058af3748d2a5b17b324f79ab858117ee415c3a52a66d7d81e7ec
SHA512

b7bcc33a03bbcc297f694c8383fd0e599cc56445ae212da6c2895a4c695d47e5dbe2d158f73e0abcd1e036285b2c361e36b0d05505cacd7ec3004f4b11c1ad9e
SSDEEP

1536:veemcrm2albdsG5pTYyooVVWlEARkTMoDAAA:vUcrmFbuGXV/Wl3gDQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dcf54c794e39d91ac76ff4bc972ad799_JaffaCakes118

Files

dcf54c794e39d91ac76ff4bc972ad799_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9056d5b22c0dce87e4072a4dfdf19492

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTime
GetVersion
lstrlenA
GetTickCount
lstrcpyA
GetTempPathA
FindAtomA
GetLocalTime
CloseHandle
WriteFile
CreateFileA
lstrcatA
lstrcpynA
GetModuleFileNameA
GetLastError
GetProcAddress
GetModuleHandleA
LoadLibraryA
GetTempFileNameA
CreateMutexA
OpenMutexA
ExitProcess
lstrcmpA
GetCommandLineA
RtlUnwind
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

user32

IsWindowVisible
EqualRect
GetWindowRect
ClientToScreen
GetCursorPos
InflateRect
GetCaretPos
GetFocus
wsprintfA

shlwapi

SHGetValueA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE