0d03893e56294bd3051ecf8d27ed849f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d03893e56294bd3051ecf8d27ed849f_JaffaCakes118
Size

82KB
MD5

0d03893e56294bd3051ecf8d27ed849f
SHA1

1424e83edbacb1a1f5022b81bd650b6f66cc581b
SHA256

1efb69ecac8c1c9d258f89cbfb573a9bd55bd4f03505ccddc55fc34ac73206d4
SHA512

e36a05c7bd2b35117c4c983839ba70503fc2b64c70374718d32f4eef81528ef267b78dba4549d1d6a9f997fa81e6a22af51e737ddd7d358c6fac300b3eb8c23a
SSDEEP

1536:mtEdM+Avwn3QRum3nSIU/znOGOL9q/yR/V22VEY+69ot:nM+Ywn3QAI8rwoAtLEY+Zt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d03893e56294bd3051ecf8d27ed849f_JaffaCakes118

Files

0d03893e56294bd3051ecf8d27ed849f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5e7a1aac9b09a7420c3363c458772ac4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
lstrcpyA
lstrlenA
GetVersion
GetSystemTime
GetTempPathA
CloseHandle
WriteFile
CreateFileA
FindAtomA
lstrcatA
lstrcpynA
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
GetLocalTime
GetTickCount
LoadLibraryA
CreateMutexA
OpenMutexA
ExitProcess
lstrcmpA
RtlUnwind
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

user32

GetFocus
GetWindowRect
wsprintfA
EqualRect
InflateRect
GetCursorPos
IsWindowVisible
ClientToScreen
GetCaretPos

shlwapi

SHGetValueA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE