55c47e731951e4c4a9baf13cf32faeb9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55c47e731951e4c4a9baf13cf32faeb9_JaffaCakes118
Size

78KB
MD5

55c47e731951e4c4a9baf13cf32faeb9
SHA1

e4ab15cd20ced2f96928163b653c83e2f50b8d3a
SHA256

7834a98a745672fb875abb406a7339fe43daeabb612889aa99ccd971f635ebda
SHA512

6d2c46f168a2fece43d6805db345538ea84cb7393e55b2546cd220b92b2b2b6e8a49ccb130434a1b53ab052197326c9ac85e0e5eaeea2ae0454aa43e4c29247e
SSDEEP

1536:nHqA6I9cR10H5XSVRXMt03YnlS8lb3w/HNUzwQ74F++9eVcWr7V:Dl9cA5SVRXMZck3oeO9e37V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55c47e731951e4c4a9baf13cf32faeb9_JaffaCakes118

Files

55c47e731951e4c4a9baf13cf32faeb9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

19833c074d533f8580250a490d2e8a40

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetSystemTime
GetVersion
lstrlenA
GetLastError
lstrcpyA
GetTempPathA
CloseHandle
WriteFile
CreateFileA
lstrcatA
lstrcpynA
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
GetLocalTime
LoadLibraryA
GetTempFileNameA
CreateMutexA
OpenMutexA
ExitProcess
lstrcmpA
FindAtomA
GetCommandLineA
RtlUnwind
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

user32

IsWindowVisible
EqualRect
GetWindowRect
wsprintfA
GetCaretPos
InflateRect
GetFocus
ClientToScreen
GetCursorPos

shlwapi

SHGetValueA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE