f189d0d8c8fef9056f55c610a77800e2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f189d0d8c8fef9056f55c610a77800e2_JaffaCakes118
Size

17KB
MD5

f189d0d8c8fef9056f55c610a77800e2
SHA1

904b80a39afa6958782edbb59018f445002ec4dc
SHA256

75358d2c0ede7093821054f5520422a5fe1c10e080dac8843ded8b5951d749f4
SHA512

b40c518fbe01a615c799e217daada2bd5e3a8c2e5449a7a2eba918239d838f5133e469ba801c4f54041d7134a1a5dd19845fe494d3dcd4e87529801f41fcbe39
SSDEEP

192:Hq9NNOtJGp1umGy9mH2QuDDtvoRLG1R3VaDgm08BaSX90q+/vv+Keh0/0:K9KJGpcn5HkL1RkBaM9S3+pys

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f189d0d8c8fef9056f55c610a77800e2_JaffaCakes118

Files

f189d0d8c8fef9056f55c610a77800e2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2051c295ff27b4ef78eb9af2d68823d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
ExitProcess
GetWindowsDirectoryA
lstrcatA
CreateFileA
GetProcessHeap
RtlUnwind
IsDebuggerPresent

user32

TranslateAcceleratorW
LoadCursorW
GetDlgItemTextW
EnableMenuItem
DefWindowProcW
UnhookWindowsHookEx

comdlg32

GetOpenFileNameW
FindTextW
ChooseFontW
GetSaveFileNameW
PrintDlgW
CommDlgExtendedError

advapi32

RegOpenKeyExA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ