ea3ba60e60f5f03ca2cc19a933a6afbb_JaffaCakes118 | Triage

Sharing

General

Target

ea3ba60e60f5f03ca2cc19a933a6afbb_JaffaCakes118
Size

53KB
MD5

ea3ba60e60f5f03ca2cc19a933a6afbb
SHA1

73a1aff34dd4ca3abcdeb3f20ca455d2b19f8118
SHA256

966dfa7b98c286d5fba0cb9f35d1bb1d5db9378303c0303fd8d93babb4d2b473
SHA512

8ffaafdafe2fe0c83b463854dba645308df20dd44e178eea9c324de4ac5ca218351ebe51a723b963660fc92b570decdbe21fc0248253dbb2e1174924c986316f
SSDEEP

1536:hcZIKbMEHr1CR6XAjXgBJlvxzr6967XVYr7Wr:ivtLa6XIgTlvQAXU7k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea3ba60e60f5f03ca2cc19a933a6afbb_JaffaCakes118

Files

ea3ba60e60f5f03ca2cc19a933a6afbb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a1dabbe91fe002f28de42d5d44ee6205

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
lstrlenA
GetLastError
lstrcpyA
GetTickCount
GetLocalTime
CloseHandle
WriteFile
GetSystemTime
CreateFileA
FindAtomA
GetTempPathA
lstrcatA
lstrcpynA
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
LoadLibraryA
GetTempFileNameA
CreateMutexA
OpenMutexA
ExitProcess
lstrcmpA
GetCommandLineA
RtlUnwind
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

user32

GetWindowRect
InflateRect
GetFocus
GetCursorPos
EqualRect
GetCaretPos
ClientToScreen
IsWindowVisible
wsprintfA

shlwapi

SHGetValueA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE