02a045c595d91e1f950f2a9be21fdd92_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02a045c595d91e1f950f2a9be21fdd92_JaffaCakes118
Size

127KB
MD5

02a045c595d91e1f950f2a9be21fdd92
SHA1

0b5ea103a9d8da291bdca519488376c3d0ad9344
SHA256

c5be21d19a50754e393c62a874b8c7d06a7cf7c250cc8e0618a3d038363d460d
SHA512

5b11c8b8a4086a16ab8ee942396773a21c12bfb9b6296a905ae34575d6a79436337699c02149188390d0f579e3bf0b45d96da6bc588d7ac001b9b2327faff56d
SSDEEP

3072:PjYmFI+zeOKndRzAlSWc+SeLebsbJ3IQQ0jKNKSfL/U:P5hzNsslSyRagbJ3IQQJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02a045c595d91e1f950f2a9be21fdd92_JaffaCakes118

Files

02a045c595d91e1f950f2a9be21fdd92_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9cca6540ec2d632d02e201e9f04e172a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
ExitThread
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleA
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
GlobalAddAtomA
InterlockedDecrement
LoadLibraryA
QueryPerformanceCounter
SetUnhandledExceptionFilter
TerminateThread
VirtualAlloc
VirtualProtect

msvcrt

atol
fseek
strcmp
swprintf
strstr
strlen
atof

user32

ClientToScreen
SetForegroundWindow

comctl32

MenuHelp
InitCommonControls
CreateToolbarEx
CreateStatusWindowA
CreatePropertySheetPageA
CreateMappedBitmap

Sections

.text
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ