52feb65af86e2047ea7cdd47594b45b4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52feb65af86e2047ea7cdd47594b45b4_JaffaCakes118
Size

98KB
MD5

52feb65af86e2047ea7cdd47594b45b4
SHA1

d8bb9d3e42149c7b5960767eec9b9827438a4011
SHA256

0ab793ed1088693c5be16e3109d97e2d5325642483799bc29578111d8c7f9e8e
SHA512

87681aae20bcb3901414688b916a3c177f6df87d81fab7887eb929eb612fd3bac0e615920ff70d0593af0ece07e27035102ab16f82b42fefec5efc602e731652
SSDEEP

1536:AOF5QFcZe9i8E3wzWXGPLKfYEQJ63eoxSk8Y3oWd3fz0pdSqcU89HzwnuIVeQ:zeeELCWjKfm6OoX8YYWdvISzUqHMnu+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52feb65af86e2047ea7cdd47594b45b4_JaffaCakes118

Files

52feb65af86e2047ea7cdd47594b45b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

505ea6dd4629b7cd7de8e01c17602ac7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryA
GetCurrentThread
GetCurrentProcessId
GetComputerNameA
GetSystemDirectoryA
GetCurrentThreadId
GetWindowsDirectoryA
GetProcAddress
LoadLibraryA
GetStdHandle
GetCurrentProcess
CreateMutexA
GetVersionExA
LockResource
LoadResource
FindResourceA
LocalFree
ExitProcess
VirtualAlloc
LocalAlloc
VirtualProtect
CreateEventA

advapi32

GetUserNameA

user32

GetSystemMetrics
GetForegroundWindow
GetActiveWindow

msvcrt

memset
memcpy

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ