15791ec044997c20b79a73c5dda837fb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15791ec044997c20b79a73c5dda837fb_JaffaCakes118
Size

18KB
MD5

15791ec044997c20b79a73c5dda837fb
SHA1

4e927f9115adf3a51a08714af94286fdcfb7f437
SHA256

bfbbf3a95bf6fc3d3bdc46a42f1f374f0e5a76c1d5a356c64d23b2787091c6e8
SHA512

3779f27273b7312101b729540b3e84f5ac82dcb184cd84248cd74dca4b1083df267c06690c1b2281b03108d5c998a2e956a9f1795b3630a2e07dd2fcb6bddb29
SSDEEP

384:k3twXXK6jG+HgAwpDpBdxG7rT7HXcm05OzQoTAV37QCgYIDHo:k67G+AAGDxyrToveA57QVXM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15791ec044997c20b79a73c5dda837fb_JaffaCakes118

Files

15791ec044997c20b79a73c5dda837fb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

19a8665e6ff225f8841771a532e2edb1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrToIntA

kernel32

GetCPInfo
UnhandledExceptionFilter
GetCurrentThreadId
DisableThreadLibraryCalls
FindResourceA
TerminateProcess
LockResource
GetStartupInfoA
GetDriveTypeA
GetStdHandle
GetCommandLineA
SizeofResource
LoadResource
OpenProcess
GetCurrentProcess
DeleteFileA
SetStdHandle
FormatMessageA
GetLastError
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
LocalFree
ReadFile
CreateFileA
VirtualAlloc
GetModuleHandleA

user32

wsprintfA
LoadStringA
MessageBoxA
LoadCursorA

ole32

CoTaskMemAlloc
CoTaskMemFree

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ